{"id":35036,"date":"2024-10-14T16:28:41","date_gmt":"2024-10-14T09:28:41","guid":{"rendered":"http:\/\/jupitek.maudemo.vip\/index.php\/2024\/10\/14\/container-instrumentation-with-the-elastic-stack\/"},"modified":"2024-10-14T16:28:41","modified_gmt":"2024-10-14T09:28:41","slug":"container-instrumentation-with-the-elastic-stack","status":"publish","type":"post","link":"https:\/\/jupitek.maudemo.vip\/index.php\/2024\/10\/14\/container-instrumentation-with-the-elastic-stack\/","title":{"rendered":"Container Instrumentation v\u1edbi Elastic Stack"},"content":{"rendered":"
\"Thi\u1ebft<\/figure>\n

Elastic Stack<\/a> c\u00f3 th\u1ec3 gi\u00e1m s\u00e1t nhi\u1ec1u lo\u1ea1i d\u1eef li\u1ec7u \u0111\u01b0\u1ee3c t\u1ea1o ra b\u1edfi c\u00e1c container Docker<\/a> . Trong h\u01b0\u1edbng d\u1eabn n\u00e0y, b\u1ea1n s\u1ebd thi\u1ebft l\u1eadp Linode \u0111\u1ec3 ph\u00e2n t\u00edch v\u00e0 tr\u1ef1c quan h\u00f3a nh\u1eadt k\u00fd v\u00e0 s\u1ed1 li\u1ec7u container b\u1eb1ng c\u00e1c c\u00f4ng c\u1ee5 nh\u01b0 Kibana, Beats v\u00e0 Elasticsearch. Sau khi ho\u00e0n t\u1ea5t, b\u1ea1n s\u1ebd c\u00f3 th\u1ec3 \u0111\u1ecbnh c\u1ea5u h\u00ecnh h\u1ec7 th\u1ed1ng c\u1ee7a m\u00ecnh \u0111\u1ec3 t\u1ef1 \u0111\u1ed9ng thu th\u1eadp d\u1eef li\u1ec7u cho c\u00e1c container b\u1ed5 sung.<\/p>\n

Tr\u01b0\u1edbc khi b\u1ea1n b\u1eaft \u0111\u1ea7u<\/a><\/h2>\n
    \n
  1. N\u1ebfu b\u1ea1n ch\u01b0a th\u1ef1c hi\u1ec7n, h\u00e3y t\u1ea1o m\u1ed9t t\u00e0i kho\u1ea3n Linode v\u00e0 Compute Instance. Xem h\u01b0\u1edbng d\u1eabn B\u1eaft \u0111\u1ea7u v\u1edbi Linode<\/a> v\u00e0 T\u1ea1o Compute Instance<\/a> c\u1ee7a ch\u00fang t\u00f4i .<\/li>\n
  2. L\u00e0m theo h\u01b0\u1edbng d\u1eabn Thi\u1ebft l\u1eadp v\u00e0 B\u1ea3o m\u1eadt Phi\u00ean b\u1ea3n Compute<\/a> c\u1ee7a ch\u00fang t\u00f4i \u0111\u1ec3 c\u1eadp nh\u1eadt h\u1ec7 th\u1ed1ng c\u1ee7a b\u1ea1n. B\u1ea1n c\u0169ng c\u00f3 th\u1ec3 mu\u1ed1n \u0111\u1eb7t m\u00fai gi\u1edd, c\u1ea5u h\u00ecnh t\u00ean m\u00e1y ch\u1ee7, t\u1ea1o t\u00e0i kho\u1ea3n ng\u01b0\u1eddi d\u00f9ng gi\u1edbi h\u1ea1n v\u00e0 t\u0103ng c\u01b0\u1eddng quy\u1ec1n truy c\u1eadp SSH.<\/li>\n
  3. Th\u1ef1c hi\u1ec7n theo H\u01b0\u1edbng d\u1eabn UFW<\/a> c\u1ee7a ch\u00fang t\u00f4i \u0111\u1ec3 c\u00e0i \u0111\u1eb7t v\u00e0 c\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda (UFW) tr\u00ean h\u1ec7 th\u1ed1ng ch\u1ea1y Ubuntu ho\u1eb7c Debian c\u1ee7a b\u1ea1n ho\u1eb7c H\u01b0\u1edbng d\u1eabn FirewallD<\/a> c\u1ee7a ch\u00fang t\u00f4i cho h\u1ec7 th\u1ed1ng ch\u1ea1y rpm ho\u1eb7c CentOS. Sau khi c\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda, h\u00e3y \u0111\u1ea3m b\u1ea3o r\u1eb1ng c\u00e1c c\u1ed5ng c\u1ea7n thi\u1ebft \u0111\u01b0\u1ee3c m\u1edf \u0111\u1ec3 ti\u1ebfn h\u00e0nh k\u1ebft n\u1ed1i qua SSH cho ph\u1ea7n c\u00f2n l\u1ea1i c\u1ee7a h\u01b0\u1edbng d\u1eabn n\u00e0y:sudo ufw allow ssh<\/code><\/li>\n
  4. C\u00e0i \u0111\u1eb7t Docker tr\u00ean Linode c\u1ee7a b\u1ea1n b\u1eb1ng c\u00e1ch l\u00e0m theo h\u01b0\u1edbng d\u1eabn c\u00e0i \u0111\u1eb7t t\u1eeb d\u1ef1 \u00e1n Docker<\/a> .<\/li>\n<\/ol>\n

    Ghi ch\u00fa: C\u00e1c d\u1ecbch v\u1ee5 trong h\u01b0\u1edbng d\u1eabn n\u00e0y ch\u1ec9 li\u00ean k\u1ebft v\u1edbi localhost, ngh\u0129a l\u00e0 ch\u00fang kh\u00f4ng th\u1ec3 truy c\u1eadp \u0111\u01b0\u1ee3c b\u00ean ngo\u00e0i Linode t\u1eeb c\u00e1c m\u00e1y ch\u1ee7 t\u1eeb xa. \u0110i\u1ec1u n\u00e0y \u0111\u1ea3m b\u1ea3o r\u1eb1ng REST API c\u1ee7a Elasticsearch v\u1eabn ri\u00eang t\u01b0 v\u1edbi localhost v\u00e0 kh\u00f4ng th\u1ec3 truy c\u1eadp t\u1eeb xa t\u1eeb internet. N\u1ebfu b\u1ea1n th\u1ef1c hi\u1ec7n c\u00e1c b\u01b0\u1edbc ngo\u00e0i h\u01b0\u1edbng d\u1eabn n\u00e0y \u0111\u1ec3 c\u1ea5u h\u00ecnh Elasticsearch v\u00e0 c\u00e1c th\u00e0nh ph\u1ea7n li\u00ean quan, h\u00e3y \u0111\u1ea3m b\u1ea3o r\u1eb1ng t\u01b0\u1eddng l\u1eeda c\u1ee7a b\u1ea1n \u0111\u01b0\u1ee3c thi\u1ebft l\u1eadp v\u00e0 ch\u1eb7n \u0111\u00fang l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp \u0111\u1ebfn c\u00e1c n\u00fat Elasticsearch v\u00e0 Kibana t\u1eeb internet (c\u1ed5ng 9200 v\u00e0 9300 cho Elasticsearch v\u00e0 5601 cho Kibana) \u0111\u1ec3 gi\u1eef cho ch\u00fang \u0111\u01b0\u1ee3c b\u1ea3o m\u1eadt \u0111\u00fang c\u00e1ch.<\/p>\n

    C\u00e0i \u0111\u1eb7t Elastic Stack Components<\/a><\/h2>\n

    Tr\u01b0\u1edbc khi c\u1ea5u h\u00ecnh h\u1ec7 th\u1ed1ng \u0111\u1ec3 theo d\u00f5i c\u00e1c container \u0111ang ch\u1ea1y, tr\u01b0\u1edbc ti\u00ean h\u00e3y c\u00e0i \u0111\u1eb7t c\u00e1c th\u00e0nh ph\u1ea7n c\u1ea7n thi\u1ebft \u0111\u1ec3 thu th\u1eadp v\u00e0 g\u1eedi nh\u1eadt k\u00fd v\u00e0 s\u1ed1 li\u1ec7u \u0111\u1ebfn Elasticsearch.<\/p>\n

    C\u00e1c b\u1ea3n ph\u00e2n ph\u1ed1i d\u1ef1a tr\u00ean Debian<\/a><\/h3>\n

    C\u1ea5u h\u00ecnh kho l\u01b0u tr\u1eef Elastic apt<\/code>v\u00e0 c\u00e0i \u0111\u1eb7t c\u00e1c g\u00f3i c\u1ea7n thi\u1ebft c\u00f9ng c\u00e1c g\u00f3i ph\u1ee5 thu\u1ed9c c\u1ee7a ch\u00fang.<\/p>\n

    1.C\u00e0i \u0111\u1eb7t kh\u00f3a k\u00fd g\u00f3i Elastic APT ch\u00ednh th\u1ee9c:<\/p>\n

    wget -qO - https:\/\/artifacts.elastic.co\/GPG-KEY-elasticsearch | sudo apt-key add -<\/code><\/pre>\n
    2.C\u00e0i \u0111\u1eb7t apt-transport-https<\/code>g\u00f3i c\u1ea7n thi\u1ebft \u0111\u1ec3 truy xu\u1ea5t deb<\/code>c\u00e1c g\u00f3i \u0111\u01b0\u1ee3c ph\u1ee5c v\u1ee5 qua HTTPS:<\/p>\n
    sudo apt-get install apt-transport-https\n<\/code><\/pre>\n
    3.Th\u00eam th\u00f4ng tin kho l\u01b0u tr\u1eef APT v\u00e0o danh s\u00e1ch ngu\u1ed3n c\u1ee7a m\u00e1y ch\u1ee7:<\/p>\n
    echo \"deb https:\/\/artifacts.elastic.co\/packages\/6.x\/apt stable main\" | sudo tee -a \/etc\/apt\/sources.list.d\/elastic-6.x.list\n<\/code><\/pre>\n
    4.L\u00e0m m\u1edbi danh s\u00e1ch c\u00e1c g\u00f3i c\u00f3 s\u1eb5n:<\/p>\n
    sudo apt-get update<\/code><\/pre>\n
    5.Tr\u01b0\u1edbc khi c\u00e0i \u0111\u1eb7t Elasticsearch, Java runtime ph\u1ea3i c\u00f3 m\u1eb7t. Tr\u00ean c\u00e1c h\u1ec7 th\u1ed1ng nh\u01b0 Ubuntu 18.04 LTS, s\u1eed d\u1ee5ng default-jre-headless<\/code>g\u00f3i c\u00e0i \u0111\u1eb7t Java runtime t\u01b0\u01a1ng th\u00edch:<\/p>\n
    sudo apt-get install default-jre-headless\n<\/code><\/pre>\n
    6.C\u00e0i \u0111\u1eb7t Elasticsearch, Kibana, Filebeat v\u00e0 Metricbeat:<\/p>\n
    sudo apt-get install elasticsearch kibana filebeat metricbeat\n<\/code><\/pre>\n
    Ph\u00e2n ph\u1ed1i d\u1ef1a tr\u00ean Redhat<\/a><\/h3>\n
    C\u1ea5u h\u00ecnh rpm<\/code>kho l\u01b0u tr\u1eef yum<\/code>v\u00e0 c\u00e1c c\u00f4ng c\u1ee5 \u0111\u00f3ng g\u00f3i li\u00ean quan.<\/p>\n
    1.Tin t\u01b0\u1edfng v\u00e0o kh\u00f3a k\u00fd Elastic:<\/p>\n
    sudo rpm --import https:\/\/artifacts.elastic.co\/GPG-KEY-elasticsearch<\/code><\/pre>\n
    2.T\u1ea1o c\u1ea5u h\u00ecnh kho l\u01b0u tr\u1eef yum \u0111\u1ec3 s\u1eed d\u1ee5ng kho l\u01b0u tr\u1eef Elastic yum:<\/p>\n
    [elasticsearch-6.x]\nname=Elastic repository for 6.x packages\nbaseurl=https:\/\/artifacts.elastic.co\/packages\/6.x\/yum\ngpgcheck=1\ngpgkey=https:\/\/artifacts.elastic.co\/GPG-KEY-elasticsearch\nenabled=1\nautorefresh=1\ntype=rpm-md\n    <\/code><\/pre>\n
    3.C\u1eadp nh\u1eadt yum<\/code>b\u1ed9 nh\u1edb \u0111\u1ec7m \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o m\u1ecdi g\u00f3i m\u1edbi \u0111\u1ec1u kh\u1ea3 d\u1ee5ng:<\/p>\n
    sudo yum update<\/code><\/pre>\n
    4.Tr\u01b0\u1edbc khi c\u00e0i \u0111\u1eb7t Elasticsearch, Java runtime ph\u1ea3i c\u00f3 m\u1eb7t. V\u00ed d\u1ee5, tr\u00ean CentOS, c\u00f3 th\u1ec3 c\u00e0i \u0111\u1eb7t Java runtime t\u01b0\u01a1ng th\u00edch b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng g\u00f3i OpenJDK kh\u00f4ng c\u00f3 giao di\u1ec7n:<\/p>\n
    sudo yum install java-11-openjdk-headless\n<\/code><\/pre>\n
    5.C\u00e0i \u0111\u1eb7t Elasticsearch, Kibana, Filebeat v\u00e0 Metricbeat:<\/p>\n
    sudo yum install elasticsearch kibana filebeat metricbeat\n<\/code><\/pre>\n
    C\u1ea5u h\u00ecnh Elastic Stack<\/a><\/h2>\n
    \u0110\u1ec3 kh\u00e1m ph\u00e1 v\u00e0 n\u1eafm b\u1eaft \u0111\u00fang s\u1ed1 li\u1ec7u container, m\u1ed7i th\u00e0nh ph\u1ea7n c\u1ee7a ng\u0103n x\u1ebfp Elastic ph\u1ea3i \u0111\u01b0\u1ee3c c\u1ea5u h\u00ecnh.<\/p>\n
    T\u00ecm ki\u1ebfm \u0111\u00e0n h\u1ed3i<\/a><\/h3>\n
    Trong t\u1ec7p, \/etc\/elasticsearch\/jvm.options<\/code>hai gi\u00e1 tr\u1ecb b\u1eaft \u0111\u1ea7u b\u1eb1ng -Xm<\/code>ph\u1ea3i kh\u00f4ng c\u00f3 ch\u00fa th\u00edch. C\u00e1c thi\u1ebft l\u1eadp n\u00e0y h\u01b0\u1edbng d\u1eabn JVM ph\u00e2n b\u1ed5 m\u1ed9t l\u01b0\u1ee3ng b\u1ed9 nh\u1edb c\u1ee5 th\u1ec3. Gi\u00e1 tr\u1ecb khuy\u1ebfn ngh\u1ecb cho c\u00e1c thi\u1ebft l\u1eadp n\u00e0y l\u00e0 50% RAM h\u1ec7 th\u1ed1ng kh\u1ea3 d\u1ee5ng. V\u00ed d\u1ee5, tr\u00ean h\u1ec7 th\u1ed1ng c\u00f3 1G RAM, c\u00e1c thi\u1ebft l\u1eadp n\u00e0y ph\u1ea3i l\u00e0:<\/p>\n
    -Xms512m\n-Xmx512m<\/code><\/pre>\n
    1.Tr\u01b0\u1edbc khi kh\u1edfi \u0111\u1ed9ng Elasticsearch, h\u00e3y c\u00e0i \u0111\u1eb7t m\u1ed9t s\u1ed1 plugin c\u1ea7n thi\u1ebft \u0111\u1ec3 x\u1eed l\u00fd d\u1eef li\u1ec7u geoip v\u00e0 user-agent.<\/p>\n
    sudo \/usr\/share\/elasticsearch\/bin\/elasticsearch-plugin install ingest-user-agent\nsudo \/usr\/share\/elasticsearch\/bin\/elasticsearch-plugin install ingest-geoip<\/code><\/pre>\n
    2.Sau khi thi\u1ebft l\u1eadp xong c\u00e1c th\u00f4ng tin n\u00e0y, h\u00e3y b\u1eaft \u0111\u1ea7u elasticsearch<\/code>d\u1ecbch v\u1ee5.<\/p>\n
    sudo systemctl start elasticsearch\n<\/code><\/pre>\n
    3.\u0110\u1ee3i m\u1ed9t kho\u1ea3ng th\u1eddi gian ng\u1eafn \u0111\u1ec3 Elasticsearch kh\u1edfi \u0111\u1ed9ng, sau \u0111\u00f3 ki\u1ec3m tra xem Elasticsearch c\u00f3 ph\u1ea3n h\u1ed3i qua REST API kh\u00f4ng:<\/p>\n
    curl http:\/\/localhost:9200\n<\/code><\/pre>\n
    B\u1ea1n s\u1ebd th\u1ea5y k\u1ebft qu\u1ea3 t\u01b0\u01a1ng t\u1ef1 nh\u01b0 sau:<\/p>\n
    {\n  \"name\" : \"iQEk_-M\",\n  \"cluster_name\" : \"elasticsearch\",\n  \"cluster_uuid\" : \"tQeLgbKrTNOp2AoqdmTItw\",\n  \"version\" : {\n        \"number\" : \"6.5.4\",\n        \"build_flavor\" : \"default\",\n        \"build_type\" : \"deb\",\n        \"build_hash\" : \"d2ef93d\",\n        \"build_date\" : \"2018-12-17T21:17:40.758843Z\",\n        \"build_snapshot\" : false,\n        \"lucene_version\" : \"7.5.0\",\n        \"minimum_wire_compatibility_version\" : \"5.6.0\",\n        \"minimum_index_compatibility_version\" : \"5.0.0\"\n  },\n  \"tagline\" : \"You Know, for Search\"\n}<\/code><\/pre>\n
    Elasticsearch \u0111\u00e3 s\u1eb5n s\u00e0ng \u0111\u1ec3 l\u1eadp ch\u1ec9 m\u1ee5c t\u00e0i li\u1ec7u.<\/p>\n
    Kibana<\/a><\/h3>\n
    H\u1ea7u h\u1ebft c\u00e1c thi\u1ebft l\u1eadp m\u1eb7c \u0111\u1ecbnh c\u1ee7a Kibana \u0111\u1ec1u ph\u00f9 h\u1ee3p v\u1edbi m\u1ee5c \u0111\u00edch c\u1ee7a h\u01b0\u1edbng d\u1eabn n\u00e0y. Kh\u00f4ng c\u1ea7n thay \u0111\u1ed5i c\u1ea5u h\u00ecnh; h\u00e3y kh\u1edfi \u0111\u1ed9ng d\u1ecbch kibana<\/code>v\u1ee5.<\/p>\n
    sudo systemctl start kibana<\/code><\/pre>\n
    T\u1eadp tin<\/a><\/h3>\n
    S\u1eed d\u1ee5ng docker<\/code>\u0111\u1ea7u v\u00e0o \u0111\u1ec3 cho ph\u00e9p Filebeat ghi l\u1ea1i c\u00e1c container \u0111\u00e3 b\u1eaft \u0111\u1ea7u m\u1ed9t c\u00e1ch \u0111\u1ed9ng. \u0110i\u1ec1u n\u00e0y gi\u00fap gi\u1ea3m nhu c\u1ea7u ch\u1ec9 \u0111\u1ecbnh \u0111\u01b0\u1eddng d\u1eabn t\u1ec7p nh\u1eadt k\u00fd Docker v\u00e0 thay v\u00e0o \u0111\u00f3 cho ph\u00e9p Filebeat kh\u00e1m ph\u00e1 c\u00e1c container khi ch\u00fang b\u1eaft \u0111\u1ea7u.<\/p>\n
    1.Th\u00eam n\u1ed9i dung sau v\u00e0o g\u1ea7n \u0111\u1ea7u t\u1ec7p c\u1ea5u h\u00ecnh Filebeat \u0111\u1ec3 h\u01b0\u1edbng d\u1eabn filebeat<\/code>daemon ghi l\u1ea1i nh\u1eadt k\u00fd v\u00f9ng ch\u1ee9a Docker. Nh\u1eefng d\u00f2ng n\u00e0y ph\u1ea3i \u0111\u01b0\u1ee3c nh\u1eadp d\u01b0\u1edbi kh\u00f3a c\u1ea5u h\u00ecnh filebeat.inputs<\/code>:<\/p>\n
    filebeat.inputs:\n- type: docker\n  containers.ids:\n  - '*'\n  processors:\n  - add_docker_metadata: ~<\/code><\/pre>\n
    2.B\u1ecf ch\u00fa th\u00edch \u1edf d\u00f2ng sau v\u00e0 thay \u0111\u1ed5i gi\u00e1 tr\u1ecb c\u1ee7a n\u00f3 th\u00e0nh true<\/code>, \u0111i\u1ec1u n\u00e0y s\u1ebd cho ph\u00e9p Filebeat t\u1ea1o b\u1ea3ng th\u00f4ng tin Kibana li\u00ean quan cho c\u00e1c nh\u1eadt k\u00fd v\u00f9ng ch\u1ee9a \u0111\u00e3 ch\u1ee5p:<\/p>\n
    setup.dashboards.enabled: true<\/code><\/pre>\n
    3.Cu\u1ed1i c\u00f9ng, th\u00eam c\u1ea5u h\u00ecnh sau autodiscover<\/code>v\u00e0o cu\u1ed1i t\u1ec7p filebeat.yml<\/code>:<\/p>\n
    filebeat.autodiscover:\n  providers:\n    - type: docker\n      hints.enabled: true<\/code><\/pre>\n
    4.K\u00edch ho\u1ea1t nginx<\/code>m\u00f4-\u0111un s\u1ebd \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng sau trong h\u01b0\u1edbng d\u1eabn n\u00e0y:<\/p>\n
    sudo \/usr\/bin\/filebeat modules enable nginx\n<\/code><\/pre>\n
    5.Ph\u1ea7n c\u00f2n l\u1ea1i c\u1ee7a t\u1ec7p c\u1ea5u h\u00ecnh s\u1ebd h\u01b0\u1edbng d\u1eabn Filebeat g\u1eedi nh\u1eadt k\u00fd \u0111\u1ebfn phi\u00ean b\u1ea3n Elasticsearch \u0111ang ch\u1ea1y c\u1ee5c b\u1ed9, c\u00f3 th\u1ec3 gi\u1eef nguy\u00ean kh\u00f4ng thay \u0111\u1ed5i. Kh\u1edfi \u0111\u1ed9ng Filebeat:<\/p>\n
    sudo systemctl start filebeat<\/code><\/pre>\n
    Metricbeat<\/a><\/h3>\n
    Gi\u1ed1ng nh\u01b0 Filebeat, h\u00e3y c\u1ea5u h\u00ecnh Metricbeat t\u01b0\u01a1ng t\u1ef1 \u0111\u1ec3 t\u1ef1 \u0111\u1ed9ng ph\u00e1t hi\u1ec7n c\u00e1c container \u0111ang ch\u1ea1y \u0111\u1ec3 theo d\u00f5i.<\/p>\n
    1.Metricbeat s\u1eed d\u1ee5ng m\u1ed9t m\u00f4-\u0111un \u0111\u1ec3 thu th\u1eadp s\u1ed1 li\u1ec7u container. Ph\u00e1t h\u00e0nh l\u1ec7nh sau \u0111\u1ec3 b\u1eadt c\u00e1c m\u00f4-\u0111un docker<\/code>v\u00e0 nginx<\/code>:<\/p>\n
    sudo \/usr\/bin\/metricbeat modules enable docker\nsudo \/usr\/bin\/metricbeat modules enable nginx<\/code><\/pre>\n
    2.B\u1ecf ch\u00fa th\u00edch \u1edf d\u00f2ng sau v\u00e0 thay \u0111\u1ed5i gi\u00e1 tr\u1ecb c\u1ee7a n\u00f3 th\u00e0nh true<\/code>, \u0111i\u1ec1u n\u00e0y s\u1ebd cho ph\u00e9p Metricbeat t\u1ea1o b\u1ea3ng th\u00f4ng tin Kibana li\u00ean quan cho nh\u1eadt k\u00fd v\u00f9ng ch\u1ee9a \u0111\u00e3 ghi l\u1ea1i:<\/p>\n
    setup.dashboards.enabled: true<\/code><\/pre>\n
    3.Ph\u1ea7n c\u00f2n l\u1ea1i c\u1ee7a t\u1ec7p c\u1ea5u h\u00ecnh s\u1ebd h\u01b0\u1edbng d\u1eabn Metricbeat g\u1eedi nh\u1eadt k\u00fd \u0111\u1ebfn phi\u00ean b\u1ea3n Elasticsearch \u0111ang ch\u1ea1y c\u1ee5c b\u1ed9, c\u00f3 th\u1ec3 gi\u1eef nguy\u00ean. B\u00e2y gi\u1edd c\u00f3 th\u1ec3 kh\u1edfi \u0111\u1ed9ng Metricbeat:<\/p>\n
    sudo systemctl start metricbeat\n<\/code><\/pre>\n
    Hi\u1ec3n th\u1ecb Nh\u1eadt k\u00fd v\u00e0 S\u1ed1 li\u1ec7u Container<\/a><\/h2>\n
    V\u00ed d\u1ee5 sau \u0111\u00e2y minh h\u1ecda c\u00e1ch Filebeat v\u00e0 Metricbeat t\u1ef1 \u0111\u1ed9ng thu th\u1eadp d\u1eef li\u1ec7u container c\u00f3 th\u1ec3 truy c\u1eadp \u0111\u01b0\u1ee3c trong Kibana.<\/p>\n
    1.\u0110\u1ec3 b\u1eaft \u0111\u1ea7u, h\u00e3y ch\u1ea1y m\u1ed9t container Docker nginx \u0111\u01a1n gi\u1ea3n tr\u00ean Linode c\u1ee7a b\u1ea1n.<\/p>\n
    sudo docker run --name nginx -P -d --label co.elastic.logs\/module=nginx nginx\n<\/code><\/pre>\n