logstash版本需要和es版本一致。

1、下载密钥

rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch

2、新增logstash镜像文件

vi /etc/yum.repos.d/logstash.repo

[logstash-6.x]

name=Elastic repository for 6.x packages

baseurl=https://artifacts.elastic.co/packages/6.x/yum

gpgcheck=1

gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch

enabled=1

3、安装

yum install logstash

4、启动Logstash服务

systemctl start logstash.service

5、设置开机自启动

systemctl enable logstash.service

6、进入/usr/share/logstash，运行bin/logstash -e  'input { stdin { } } output { stdout {} }'

可查看端口