Skip to main content

elk

ELK yml​

1.elastic​

cluster.name: "docker-cluster"
network.host: 0.0.0.0
http.port: 9200
# 开启es跨域
http.cors.enabled: true
http.cors.allow-origin: "*"
http.cors.allow-headers: Authorization
# 开启安全控制
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true

2.kibana​

server.name: kibana
server.host: "0.0.0.0"
# http://ip:9200 TODO 修改为自己的ip
elasticsearch.hosts: "http://elasticsearch:9200" 
xpack.monitoring.ui.container.elasticsearch.enabled: true
elasticsearch.username: "elastic"  # es账号
elasticsearch.password: "elastic"  # es密码
i18n.locale: zh-CN # 中文

3.docker compose​

version: '3'

networks:
  es:

services:

  elasticsearch:
    image: registry.cn-beijing.aliyuncs.com/yyb-ricky/elasticsearch:7.10.1
    container_name: elasticsearch
    restart: always
    volumes:                                  # 数据卷挂载路径设置,将本机目录映射到容器目录
      - /mnt/data/efk/es/data:/usr/share/elasticsearch/data
      - /mnt/data/efk/es/logs:/usr/share/elasticsearch/logs
      - /mnt/data/efk/es/plugins:/usr/share/elasticsearch/plugins
      - ./elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml
    ports:
      - 9200:9200
      - 9300:9300
    privileged: true
    environment:
      # 开启内存锁定
      - bootstrap.memory_lock=true
      # 修改jvm内存
      - ES_JAVA_OPTS=-Xms4g -Xmx4g
      - TAKE_FILE_OWNERSHIP=true
     # 指定单节点启动
      - discovery.type=single-node
    ulimits:
      # 取消内存相关限制  用于开启内存锁定
     memlock:
        soft: -1
        hard: -1
    networks:
      - es

  kibana:
    image: registry.cn-beijing.aliyuncs.com/yyb-ricky/kibana:7.10.1
    container_name: kibana
    privileged: true
    restart: always
    volumes:
      - ./kibana.yml:/usr/share/kibana/config/kibana.yml
    ports:
      - 5601:5601
    networks:
      - es