1. 编写logstash.yaml配置文件

---
apiVersion: v1
kind: Service
metadata:name: logstash
spec:type: ClusterIPclusterIP: Noneports:- name: logstash-tcpport: 5000targetPort: 5000- name: logstash-beatsport: 5044targetPort: 5044- name: logstash-apiport: 9600targetPort: 9600selector:app: logstash
---
apiVersion: v1
kind: ConfigMap
metadata:name: logstash-config
data:# 指定配置文件的内容logstash.yml: |http.host: 0.0.0.0xpack.monitoring.elasticsearch.hosts: [ "http://elasticsearch:9200" ]
---
apiVersion: v1
kind: ConfigMap
metadata:name: logstash-pipeline-config
data:# 指定配置文件的内容logstash.conf: |-input {beats {port => 5044}tcp {port => 5000}}output {elasticsearch {hosts => "elasticsearch:9200"user => "elastic"password