下载并安装公钥

sudo rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch

设置源

cat > /etc/yum.repos.d/logstash.repo <<EOF
[logstash-7.x]
name=Elastic repository for 7.x packages
baseurl=https://artifacts.elastic.co/packages/7.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md
EOF

安装

yum install logstash
#查看安装目录
rpm -ql logstash
#创建软链接
ln -s /usr/share/logstash/bin/logstash /bin/

测试

logstash -e 'input { stdin { } } output { stdout {} }' 
#运行成功后输入任意内容测试

验证配置文件是否正确

logstash -f etc/conf.d/ -t	# 这里出现OK就说明没有问题

自动重载--config.reload.automatic默认3s

nohup bin/logstash -f etc/conf.d/ --config.reload.automatic &

参考

https://www.cnblogs.com/dotqin/p/13638382.html

https://www.elastic.co/guide/en/logstash/7.17/installing-logstash.html