demo-elk/docker-compose.yml at main · uniquejava/demo-elk · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
services:
  order-service:
    build: ./
    image: order-service
    mem_limit: 512m
    environment:
      - SPRING_PROFILES_ACTIVE=default
    ports:
      - "8080:8080"
    logging:
      driver: "json-file"   # 启用默认驱动，Filebeat 会读它
    labels:
      - "filebeat_enable=true"  # 用于过滤

  elasticsearch:
    image: docker.elastic.co/elasticsearch/elasticsearch:8.17.4
    hostname: elasticsearch
    environment:
      - discovery.type=single-node
      - ES_JAVA_OPTS=-Xms2g -Xmx4g
      - xpack.security.enabled=false
      - ingest.geoip.downloader.enabled=false
    volumes:
      - es_data:/usr/share/elasticsearch/data
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:9200/_cluster/health?pretty"]
      interval: 15s
      timeout: 20s
      retries: 10
      start_period: 40s
    ports:
      - "9200:9200"

  logstash:
    image: docker.elastic.co/logstash/logstash:8.17.4
    ports:
      - "5044:5044"  # ✅ 暴露 beats 端口（可选，仅调试用）
    volumes:
      - ./docker/logstash/pipeline:/usr/share/logstash/pipeline
      - ./docker/logstash/logstash.yml:/usr/share/logstash/config/logstash.yml:ro
    environment:
      - LS_JAVA_OPTS=-Xms512m -Xmx1g
    healthcheck:
      test: ["CMD", "nc", "-z", "localhost", "5044"]
      interval: 10s
      timeout: 5s
      retries: 10
      start_period: 10s
    depends_on:
      elasticsearch:
        condition: service_healthy

  kibana:
    image: docker.elastic.co/kibana/kibana:8.17.4
    environment:
      - ELASTICSEARCH_HOSTS=http://elasticsearch:9200
    ports:
      - "5601:5601"
    depends_on:
      elasticsearch:
        condition: service_healthy

  # 👇 新增：Filebeat 服务
  filebeat:
    image: docker.elastic.co/beats/filebeat:8.17.4
    user: root
    command: ["filebeat", "-e", "--strict.perms=false", "-c", "/usr/share/filebeat/filebeat.yml"]
    volumes:
      # 挂载 Docker socket 以获取容器信息（必须）
      - /var/lib/docker/containers:/var/lib/docker/containers:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
      # 挂载配置文件
      - ./docker/filebeat/filebeat.yml:/usr/share/filebeat/filebeat.yml:ro

volumes:
  es_data: