elk-docker安装

1.安装docker jdk1.8
2.下载docker镜像

docker pull mongo
docker pull docker.elastic.co/elasticsearch/elasticsearch-oss:6.8.5
docker pull graylog/graylog:3.1

3.分开启动3个组件(推荐)
# mongodb

docker run \
--name mongo \
--net bridge \
-p 27017:27017 \
-v /etc/localtime:/etc/localtime:ro \
-v mongo_data:/data/db \
-d mongo:latest

# elasticsearch

docker run \
--name elasticsearch \
--net bridge \
-p 9200:9200 -p 9300:9300 \
-e "http.host=0.0.0.0" \
-e "ES_JAVA_OPTS=-Xms512m -Xmx512m" \
-e "discovery.type=single-node" \
-e http.cors.allow-origin="*" \
-e http.cors.enabled=true \
-v /etc/localtime:/etc/localtime:ro \
-v es_data:/usr/share/elasticsearch/data \
-d docker.elastic.co/elasticsearch/elasticsearch-oss:7.8.1
-d elasticsearch:7.8.1

docker run \
--link elasticsearch \
--name kibana \
--net bridge \
-p 5601:5601 \
-d docker.elastic.co/kibana/kibana:7.8.1

# graylog

docker run \
--name graylog \
--net bridge \
-p 9000:9000 \
-p 12201:12201 -p 12201:12201/udp \
-p 1514:1514 -p 1514:1514/udp -p 5044:5044 \
-e GRAYLOG_HTTP_EXTERNAL_URI=http://10.26.9.40:9000/ \
-e GRAYLOG_ROOT_TIMEZONE=Asia/Taipei \
-e GRAYLOG_WEB_ENDPOINT_URI="http://10.26.9.40:9000/:9000/api" \
-e GRAYLOG_PASSWORD_SECRET=somepasswordpepper \
-e GRAYLOG_ROOT_PASSWORD_SHA2=8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918 \
-v /etc/localtime:/etc/localtime:ro \
-v graylog_journal:/usr/share/graylog/data/journal \
-d graylog/graylog:3.3





參考
https://www.cnblogs.com/kylingx/p/11960293.html