{"id":41208,"date":"2023-04-01T07:32:08","date_gmt":"2023-08-20T20:27:21","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8kibana%e4%b8%ad%e5%91%88%e7%8e%b0azure-appservice%e7%9a%84%e8%af%8a%e6%96%ad%e6%97%a5%e5%bf%97%e5%8f%af%e8%a7%86%e5%8c%96%e3%80%82\/"},"modified":"2024-04-29T21:25:11","modified_gmt":"2024-04-29T13:25:11","slug":"%e5%9c%a8kibana%e4%b8%ad%e5%91%88%e7%8e%b0azure-appservice%e7%9a%84%e8%af%8a%e6%96%ad%e6%97%a5%e5%bf%97%e5%8f%af%e8%a7%86%e5%8c%96%e3%80%82","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8kibana%e4%b8%ad%e5%91%88%e7%8e%b0azure-appservice%e7%9a%84%e8%af%8a%e6%96%ad%e6%97%a5%e5%bf%97%e5%8f%af%e8%a7%86%e5%8c%96%e3%80%82\/","title":{"rendered":"\u5728Kibana\u4e2d\u5448\u73b0Azure AppService\u7684\u8bca\u65ad\u65e5\u5fd7\u53ef\u89c6\u5316"},"content":{"rendered":"

\u9996\u5148<\/h1>\n

Azure\u63d0\u4f9b\u7684\u6bcf\u9879\u670d\u52a1\u90fd\u5177\u6709\u80fd\u591f\u5c06\u65e5\u5fd7\u8fdb\u884cETL\uff08\u62bd\u53d6\u3001\u8f6c\u6362\u3001\u52a0\u8f7d\uff09\u548c\u5b58\u6863\u7684\u8bca\u65ad\u65e5\u5fd7\u529f\u80fd\u3002\u5728\u8fd9\u7bc7\u6587\u7ae0\u4e2d\uff0c\u6211\u4eec\u5c06\u5c55\u793a\u5982\u4f55\u4f7f\u7528\u8bca\u65ad\u65e5\u5fd7\u529f\u80fd\u5728Kibana\u4e2d\u53ef\u89c6\u5316\u5f52\u6863\u65e5\u5fd7\uff0c\u5e76\u7ed9\u51fa\u5229\u7528\u65e5\u5fd7\u7684\u6784\u5efa\u6b65\u9aa4\u7b49\u3002
\n\u6211\u4eec\u5c06\u6309\u7167\u4ee5\u4e0b\u56fe\u793a\u642d\u5efa\u7cfb\u7edf\u4ee5\u53ef\u89c6\u5316\u65e5\u5fd7\u6570\u636e\u3002<\/p>\n

\"\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8<\/div>\n

\u642d\u5efaElasticsearch\/Kibana<\/h2>\n

\u4f7f\u7528Docker\u5728Ubuntu 16.04\u4e0a\u6784\u5efaElasticsearch\/Kibana\u3002<\/p>\n

1. \u5728\u672c\u5730\u5b89\u88c5docker<\/h3>\n

\u6839\u636eDocker\u5b98\u65b9\u6587\u6863\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u8fdb\u884c\u5b89\u88c5\u3002<\/p>\n

$<\/span> sudo <\/span>apt-get update\r\n$<\/span> sudo <\/span>apt-get -y<\/span> install<\/span> \\<\/span>\r\n    apt-transport-https \\<\/span>\r\n    ca-certificates \\<\/span>\r\n    curl \\<\/span>\r\n    gnupg-agent \\<\/span>\r\n    software-properties-common\r\n$<\/span> curl -fsSL<\/span> https:\/\/download.docker.com\/linux\/ubuntu\/gpg | sudo <\/span>apt-key add -\r\n$<\/span> sudo <\/span>apt-key fingerprint 0EBFCD88\r\n$<\/span> sudo <\/span>add-apt-repository \\<\/span>\r\n   \"deb [arch=amd64] https:\/\/download.docker.com\/linux\/ubuntu <\/span>\\<\/span>\r\n   $(<\/span>lsb_release -cs<\/span>)<\/span> \\<\/span>\r\n   stable\"<\/span>\r\n$<\/span> sudo <\/span>apt-get update\r\n$<\/span> sudo <\/span>apt-get install<\/span> -y<\/span> docker-ce docker-ce-cli containerd.io\r\n<\/code><\/pre>\n
1.2. \u5b89\u88c5docker-compose<\/h3>\n
\u8bf7\u53c2\u8003Docker\u5b98\u65b9\u6587\u6863\uff0c\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u8fdb\u884c\u5b89\u88c5\u3002<\/p>\n
$<\/span> sudo <\/span>curl -L<\/span> \"https:\/\/github.com\/docker\/compose\/releases\/download\/1.25.3\/docker-compose-<\/span>$(<\/span>uname<\/span> -s<\/span>)<\/span>-<\/span>$(<\/span>uname<\/span> -m<\/span>)<\/span>\"<\/span> -o<\/span> \/usr\/local\/bin\/docker-compose\r\n$<\/span> sudo chmod<\/span> +x \/usr\/local\/bin\/docker-compose\r\n$<\/span> docker-compose --version<\/span>\r\n<\/code><\/pre>\n
1.3. \u4f7f\u7528docker-compose\u6784\u5efa<\/h3>\n
#<\/span> vi docker-compose.yml\r\n<\/code><\/pre>\n
\u6211\u5011\u5c07\u4f7f\u7528\u4ee5\u4e0b\u5167\u5bb9\u4f86\u5275\u5efadocker-compose.yml\u3002<\/p>\n
version<\/span>:<\/span> '<\/span>2'<\/span>\r\nservices<\/span>:<\/span>\r\n  elasticsearch<\/span>:<\/span>\r\n    image<\/span>:<\/span> ${ELASTICSEARCH_IMAGE}<\/span>\r\n    expose<\/span>:<\/span>\r\n      -<\/span> 9200<\/span>\r\n    ports<\/span>:<\/span>\r\n      -<\/span> \"<\/span>9200:9200\"<\/span>\r\n    volumes<\/span>:<\/span>\r\n      -<\/span> .\/elastic_data\/config\/elasticsearch.yml:\/usr\/share\/elasticsearch\/config\/elasticsearch.yml<\/span>\r\n      -<\/span> .\/elastic_data\/data:\/usr\/share\/elasticsearch\/data<\/span>\r\n    environment<\/span>:<\/span>\r\n      -<\/span> http.host=0.0.0.0<\/span>\r\n      -<\/span> transport.host=127.0.0.1<\/span>\r\n      -<\/span> ELASTIC_PASSWORD=${PASSWORD}<\/span>\r\n\r\n  kibana<\/span>:<\/span>\r\n    image<\/span>:<\/span> ${KIBANA_IMAGE}<\/span>\r\n    links<\/span>:<\/span>\r\n      -<\/span> \"<\/span>elasticsearch\"<\/span>\r\n    ports<\/span>:<\/span>\r\n      -<\/span> \"<\/span>5601:5601\"<\/span>\r\n    volumes<\/span>:<\/span>\r\n      -<\/span> .\/elastic_data\/config\/kibana.yml:\/usr\/share\/kibana\/config\/kibana.yml<\/span>\r\n      -<\/span> .\/elastic_data\/security:\/security<\/span>\r\n<\/code><\/pre>\n
\u521b\u5efa\u7528\u4e8e\u5b9a\u4e49\u5728docker-compose.yml\u4e2d\u8bfb\u53d6\u7684\u73af\u5883\u53d8\u91cf\u7684\u914d\u7f6e\u6587\u4ef6\u3002<\/p>\n
#<\/span> vi config\r\n<\/code><\/pre>\n
\u8bf7\u6839\u636e\u4ee5\u4e0b\u5185\u5bb9\u8fdb\u884c\u914d\u7f6e\u3002<\/p>\n
export USER=elastic\r\nexport PASSWORD=changeme\r\nexport ELASTIC_HOST=\"127.0.0.1\"\r\nexport ELASTIC_PORT=\"9200\"\r\nexport ELASTIC_ENDPOINT=\"http:\/\/${ELASTIC_HOST}:${ELASTIC_PORT}\"\r\nexport ELASTICSEARCH_IMAGE=docker.elastic.co\/elasticsearch\/elasticsearch:7.6.0\r\nexport KIBANA_IMAGE=docker.elastic.co\/kibana\/kibana:7.6.0\r\n<\/code><\/pre>\n
\u4e3a\u4e86\u8fd0\u884celasticsearch\uff0c\u8bf7\u6267\u884c\u4ee5\u4e0b\u547d\u4ee4\u3002<\/p>\n
#<\/span> mkdir<\/span> -p<\/span> elastic_data\/{<\/span>config,data,security}<\/span>\r\n#<\/span> chmod<\/span> -R<\/span> 755 elastic_data\/{<\/span>config,security}<\/span>\r\n#<\/span> chmod<\/span> -R<\/span> 777 elastic_data\/data\r\n<\/code><\/pre>\n
#<\/span> vi elastic_data\/config\/elasticsearch.yml\r\n#<\/span> vi elastic_data\/config\/kibana.yml\r\n<\/code><\/pre>\n
\u6bcf\u4e2a\u9879\u76ee\u5c06\u4f1a\u6709\u4ee5\u4e0b\u7684\u5185\u5bb9\u3002<\/p>\n
    elasticsearch.yml<\/ul>\n
    cluster.name<\/span>:<\/span> \"<\/span>docker-cluster\"<\/span>\r\nnetwork.host<\/span>:<\/span> 0.0.0.0<\/span>\r\ndiscovery.zen.minimum_master_nodes<\/span>:<\/span> 1<\/span>\r\n<\/code><\/pre>\n
      kibana.yml<\/ul>\n
      server.name<\/span>:<\/span> kibana<\/span>\r\nserver.host<\/span>:<\/span> \"<\/span>0\"<\/span>\r\nelasticsearch.hosts<\/span>:<\/span> http:\/\/elasticsearch:9200<\/span>\r\nelasticsearch.username<\/span>:<\/span> elastic<\/span>\r\nelasticsearch.password<\/span>:<\/span> changeme<\/span>\r\n<\/code><\/pre>\n
      \u4f7f\u7528\u4ee5\u4e0b\u7684\u65b9\u6cd5\u6267\u884cdocker-compose\u547d\u4ee4\u8fdb\u884c\u6784\u5efa\u3002<\/p>\n
      #<\/span> source <\/span>config\r\n#<\/span> docker-compose up -d<\/span>\r\n<\/code><\/pre>\n
      \u8fdb\u884c Logstash \u7684\u5b89\u88c5<\/h2>\n
      \u8bf7\u53c2\u8003\u516c\u5f0f\u6587\u6863\uff0c\u6309\u7167\u4ee5\u4e0b\u547d\u4ee4\u8fdb\u884c\u5b89\u88c5\u3002<\/p>\n
      \u5b89\u88c5OpenJDK\u3002<\/h3>\n
      $<\/span> sudo <\/span>su -\r\n#<\/span> apt-get install<\/span> -y<\/span> openjdk-11-jdk\r\n#<\/span> INSTALLED_JAVA_HOME<\/span>=<\/span>\"<\/span>$(<\/span>find \/usr\/lib\/jvm\/ -name<\/span> \"java\"<\/span> |grep 'openjdk'<\/span> | grep<\/span> -v<\/span> 'jre'<\/span>|xargs -i<\/span> dirname<\/span> \"{}\"<\/span>|xargs -i<\/span> dirname<\/span> \"{}\"<\/span>)<\/span>\"<\/span>\r\n#<\/span> export <\/span>JAVA_HOME<\/span>=<\/span>${<\/span>INSTALLED_JAVA_HOME<\/span>}<\/span>\r\n<\/code><\/pre>\n
      2.2. \u5b89\u88c5Logstash<\/h3>\n
      #<\/span> LS_VERSION<\/span>=<\/span>\"7.6.0\"<\/span>\r\n#<\/span> LS_DOWNLOAD_URL<\/span>=<\/span>\"https:\/\/artifacts.elastic.co\/downloads\/logstash\/logstash-<\/span>${<\/span>LS_VERSION<\/span>}<\/span>.tar.gz\"<\/span>\r\n#<\/span> LS_BASENAME<\/span>=<\/span>`<\/span>basename<\/span> \"<\/span>${<\/span>LS_DOWNLOAD_URL<\/span>}<\/span>\"<\/span>`<\/span>\r\n#<\/span> wget \"<\/span>${<\/span>LS_DOWNLOAD_URL<\/span>}<\/span>\"<\/span> -P<\/span> \/tmp\r\n#<\/span> tar<\/span> -zxvf<\/span> \"\/tmp\/<\/span>${<\/span>LS_BASENAME<\/span>}<\/span>\"<\/span>\r\n<\/code><\/pre>\n
      3. \u5728Azure\u4e0a\u642d\u5efa\u8d44\u6e90<\/h2>\n
      \u6211\u767b\u5f55Azure\u5e76\u542f\u52a8CloudShell\u3002<\/p>\n
      \"\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8<\/div>\n
      \u521b\u5efa\u4e00\u4e2a\u8d44\u6e90\u7ec4\u3002<\/h3>\n
      $<\/span> az group create --name<\/span> testStrAccELK\r\n<\/code><\/pre>\n
      3.2. \u5efa\u7acb\u5b58\u50a8\u8d26\u6237<\/h3>\n
      \u7531\u4e8e\u9700\u8981\u4fdd\u8bc1StorageAccount\u7684\u540d\u79f0\u662f\u552f\u4e00\u7684\uff0c\u8bf7\u6839\u636e\u9700\u8981\u8fdb\u884c\u66f4\u6539\u3002<\/p>\n
      $<\/span> az storage account create --resource-group<\/span> testStrAccELK --name<\/span> straccappelk2020021501\r\n<\/code><\/pre>\n
      \u642d\u5efa3.3. AppService(WebApps)\u3002<\/h3>\n
      $<\/span> az appservice plan create --resource-group<\/span> testStrAccELK --name<\/span> myAppServicePlan --location<\/span> japaneast --sku<\/span> B1\r\n$<\/span> az webapp create --name<\/span> testmyapp2020021501 --plan<\/span> myAppServicePlan --resource-group<\/span> testStrAccELK\r\n<\/code><\/pre>\n
      \u5728\u4e2d\u56fd\u8bed\u4e2d\u6709\u4ee5\u4e0b\u7684\u8868\u8ff0\u65b9\u5f0f\uff1a<\/h2>\n
      4. \u914d\u7f6eWebApps\u7684\u65e5\u5fd7\u8bca\u65ad\uff0c\u5e76\u5c06\u65e5\u5fd7\u4f20\u8f93\u5230StorageAccount\u4e2d\u3002<\/p>\n
      \u5c06AppService\u65e5\u5fd7\u7684\u8bbe\u7f6e\u4eceAzure\u95e8\u6237\u8fdb\u884c\u3002\u7531\u4e8eCLI\u4e2d\u6ca1\u6709\u5b9e\u73b0\u5c06\u65e5\u5fd7\u53d1\u9001\u5230blob\u5b58\u50a8\u7684\u8bbe\u7f6e\uff08\u6839\u636e\u5b98\u65b9\u7684Github\uff09\uff0c\u56e0\u6b64\u901a\u8fc7\u95e8\u6237\uff08AppService > AppService\u65e5\u5fd7\uff09\u8fdb\u884c\u8bbe\u7f6e\u3002<\/p>\n
      \"\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8<\/div>\n
      5. \u5c06Logstash\u4e2d\u7684StorageAccount\u65e5\u5fd7\u4f20\u8f93\u5230Elasticsearch\u4e2d\u3002<\/h2>\n
      \u82e5\u8981\u4eceStorageAccount\u5bfc\u5165\u65e5\u5fd7\u5230Logstash\uff0c\u5219\u9700\u8981StorageAccount\u7684\u8bbf\u95ee\u952e\u3001StorageAccount\u540d\u79f0\u548cBlob\u5bb9\u5668\u540d\u79f0\u3002\u6b64\u5916\uff0c\u8fd8\u9700\u8981\u5b89\u88c5\u7531Microsoft\u5f00\u53d1\u7684Logstash\u63d2\u4ef6\u3002<\/p>\n
      5.1. \u5b89\u88c5logstash-input-azureblob\u63d2\u4ef6<\/h3>\n
      \u5728\u8fd9\u91cc\uff0c\u6211\u4eec\u5c06\u5728Ubuntu\u4e0a\u6267\u884c\u4ee5\u4e0b\u547d\u4ee4\u8fdb\u884c\u5b89\u88c5\u3002<\/p>\n
      #<\/span> cd <\/span>logstash-7.6.0\/bin\/\r\n#<\/span> .\/logstash-plugin install <\/span>logstash-input-azureblob\r\n<\/code><\/pre>\n
      \u786e\u5b9aStorageAccount\u7684\u8bbf\u95ee\u5bc6\u94a5<\/h3>\n
      \u60a8\u53ef\u4ee5\u5728\u901a\u8fc7Azure\u95e8\u6237\u542f\u52a8\u7684Cloud Shell\u4e2d\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u8fdb\u884c\u8bc6\u522b\u3002<\/p>\n
      $<\/span> az storage account keys list --account-name<\/span> straccappelk2020021501 --resource-group<\/span> testStrAccELK\r\n<\/code><\/pre>\n
      \u521b\u5efa Logstash \u7684\u914d\u7f6e\u6587\u4ef6\u3002<\/h3>\n
      \u6211\u4f1a\u5728Ubuntu\u673a\u5668\u4e0a\u6267\u884c\u4ee5\u4e0b\u547d\u4ee4\u3002<\/p>\n
      #<\/span> vi azure_blog_webapp_diagnostic.config\r\n<\/code><\/pre>\n
      \u5047\u8bbe\u4ee5\u4e0b\u5185\u5bb9\u4e3a\u51c6\u3002<\/p>\n
      input {\r\n    azureblob\r\n    {\r\n<\/span>        registry_create_policy =><\/span> \"start_over\"<\/span>\r\n        storage_account_name =><\/span> \"straccappelk2020021501\"<\/span>\r\n        storage_access_key =><\/span> \"<STOREGE_ACCESS_KEY>\"<\/span>\r\n        container =><\/span> \"webapps-webserv-diagnostics\"<\/span>\r\n        path_filters =><\/span> \"**\/*.log\"<\/span>\r\n    }\r\n}\r\n\r\nfilter {\r\n<\/span>    if [message] =~ \"^#<\/span>\" {\r\n<\/span>        drop {}\r\n    }\r\n    grok {\r\n<\/span>        match =><\/span> {<\/span> \"message\"<\/span> =><\/span> \"%{TIMESTAMP_ISO8601:log_timestamp} %{WORD:application_name} %{WORD:http_method} %{URIPATH:uri_path} X-ARR-LOG-ID=%{UUID:x_arr_log_id} %{POSINT:port} %{USERNAME:cs_username} %{IP:ip_address} %{GREEDYDATA:user_agent} %{DATA:cs_cookie} %{DATA:referer} %{IPORHOST:host} %{NUMBER:sc_status} %{NUMBER:sc_substatus} %{NUMBER:sc_win32_status} %{NUMBER:sc_bytes} %{NUMBER:cs_bytes} %{NUMBER:time_taken}\"<\/span> }<\/span>\r\n    }\r\n}\r\noutput {\r\n  elasticsearch {\r\n<\/span>    hosts =><\/span> [<\/span>\"http:\/\/127.0.0.1:9200\"<\/span>]<\/span>\r\n    index =><\/span> \"blob-web-%{+YYYY.MM}\"<\/span>\r\n  }\r\n  stdout { }\r\n}\r\n<\/span><\/code><\/pre>\n
      5.4. \u8fd0\u884c Logstash<\/h3>\n
      #<\/span> .\/logstash -f<\/span> azure_blog_webapp_diagnostic.config\r\n\r\n\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u30ed\u30b0\u304c\u51fa\u529b\u3055\u308c\u308c\u3070StorageAccount\u304b\u3089WebApps\u306e\u30ed\u30b0\u304c\u53ce\u96c6\u3067\u304d\u3066\u3044\u307e\u3059\u3002\r\n\r\n{\r\n<\/span>          \"user_agent\" =><\/span> \"curl\/7.54.0\"<\/span>,\r\n            \"cs_bytes\" =><\/span> \"840\"<\/span>,\r\n             \"message\" =><\/span> \"2020-02-15 14:55:28 TESTMYAPP2020021501 GET \/ X-ARR-LOG-ID=138eb994-a586-4401-a5ce-a9bbb4d50a09 443 - 180.6.175.132 curl\/7.54.0 - - testmyapp2020021501.azurewebsites.net 200 0 0 3896 840 15<\/span>\\r<\/span>\"<\/span>,\r\n            \"sc_bytes\" =><\/span> \"3896\"<\/span>,\r\n            \"uri_path\" =><\/span> \"\/\"<\/span>,\r\n          \"time_taken\" =><\/span> \"15\"<\/span>,\r\n     \"sc_win32_status\" =><\/span> \"0\"<\/span>,\r\n        \"x_arr_log_id\" =><\/span> \"138eb994-a586-4401-a5ce-a9bbb4d50a09\"<\/span>,\r\n          \"ip_address\" =><\/span> \"180.6.175.132\"<\/span>,\r\n    \"application_name\" =><\/span> \"TESTMYAPP2020021501\"<\/span>,\r\n       \"log_timestamp\" =><\/span> \"2020-02-15 14:55:28\"<\/span>,\r\n         \"http_method\" =><\/span> \"GET\"<\/span>,\r\n        \"sc_substatus\" =><\/span> \"0\"<\/span>,\r\n          \"@timestamp\" =><\/span> 2020-02-15T15:04:16.278Z,\r\n             \"referer\" =><\/span> \"-\"<\/span>,\r\n                \"tags\" =><\/span> [<\/span>\r\n        [0] \"_jsonparsefailure\"\r\n    ],\r\n<\/span>         \"cs_username\" =><\/span> \"-\"<\/span>,\r\n                \"host\" =><\/span> \"testmyapp2020021501.azurewebsites.net\"<\/span>,\r\n            \"@version\" =><\/span> \"1\"<\/span>,\r\n           \"cs_cookie\" =><\/span> \"-\"<\/span>,\r\n           \"sc_status\" =><\/span> \"200\"<\/span>,\r\n                \"port\" =><\/span> \"443\"<\/span>\r\n}\r\n<\/span><\/code><\/pre>\n
      6. \u901a\u8fc7Kibana\u8fdb\u884c\u53ef\u89c6\u5316<\/h2>\n
      \u6211\u5011\u5728\u700f\u89bd\u5668\u4e0a\u8a2a\u554f\u5df2\u5efa\u7acb\u7684 Kibana\u3002\u8a2a\u554f\u5f8c\uff0c\u6309\u7167\u4ee5\u4e0b\u5716\u7247\u7684\u64cd\u4f5c\uff0c\u78ba\u8a8d\u5728 Kibana \u4e0a\u80fd\u770b\u5230 WebApps \u7684\u65e5\u8a8c\u3002<\/p>\n
      \"\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8<\/div>\n
      \u70b9\u51fb\u7d22\u5f15\u6a21\u5f0f\u6309\u94ae\u3002<\/p>\n
      \"\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8<\/div>\n
      \u70b9\u51fb\u201c\u521b\u5efa\u7d22\u5f15\u6a21\u5f0f\u201d\u6309\u94ae\u6765\u521b\u5efa\u7d22\u5f15\u3002<\/p>\n
      \"\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8<\/div>\n
      \u4ee5\u56fe\u50cf\u7684\u5f62\u5f0f\u8f93\u5165\u7d22\u5f15\u6a21\u5f0f\uff0c\u7136\u540e\u70b9\u51fb\u201c\u4e0b\u4e00\u6b65\u201d\u8fdb\u884c\u64cd\u4f5c\u3002<\/p>\n
      \"\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8<\/div>\n
      \u9009\u62e9 @Timestamp \u4f5c\u4e3a TimeFilter\uff0c\u5e76\u5728\u6309\u4e0b Create index patterns \u6309\u94ae\u540e\u5b8c\u6210\u7d22\u5f15\u521b\u5efa\u3002<\/p>\n
      \"\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8<\/div>\n
      \u4ece\u753b\u9762\u8f6c\u5230Discover\u9875\u9762\u3002<\/p>\n
      \"\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8<\/div>\n
      \u5982\u679c\u5728Discover\u4e0a\u80fd\u591f\u770b\u5230\u4e00\u4e9bWeb\u5e94\u7528\u7a0b\u5e8f\u7684\u65e5\u5fd7\uff0c\u90a3\u5c31\u662f\u6210\u529f\u4e86\uff01<\/p>\n
      \"\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8<\/div>\n
      \u4ee5\u4e0a<\/p>\n","protected":false},"excerpt":{"rendered":"
      \u9996\u5148 Azure\u63d0\u4f9b\u7684\u6bcf\u9879\u670d\u52a1\u90fd\u5177\u6709\u80fd\u591f\u5c06\u65e5\u5fd7\u8fdb\u884cETL\uff08\u62bd\u53d6\u3001\u8f6c\u6362\u3001\u52a0\u8f7d\uff09\u548c\u5b58\u6863\u7684\u8bca\u65ad\u65e5\u5fd7\u529f\u80fd\u3002\u5728\u8fd9\u7bc7\u6587\u7ae0\u4e2d […]<\/p>\n","protected":false},"author":8,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-41208","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"\n\u5728Kibana\u4e2d\u5448\u73b0Azure AppService\u7684\u8bca\u65ad\u65e5\u5fd7\u53ef\u89c6\u5316 - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u5728kibana\u4e2d\u5448\u73b0azure-appservice\u7684\u8bca\u65ad\u65e5\u5fd7\u53ef\u89c6\u5316\u3002\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u5728Kibana\u4e2d\u5448\u73b0Azure AppService\u7684\u8bca\u65ad\u65e5\u5fd7\u53ef\u89c6\u5316\" \/>\n<meta property=\"og:description\" content=\"\u9996\u5148 Azure\u63d0\u4f9b\u7684\u6bcf\u9879\u670d\u52a1\u90fd\u5177\u6709\u80fd\u591f\u5c06\u65e5\u5fd7\u8fdb\u884cETL\uff08\u62bd\u53d6\u3001\u8f6c\u6362\u3001\u52a0\u8f7d\uff09\u548c\u5b58\u6863\u7684\u8bca\u65ad\u65e5\u5fd7\u529f\u80fd\u3002\u5728\u8fd9\u7bc7\u6587\u7ae0\u4e2d […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u5728kibana\u4e2d\u5448\u73b0azure-appservice\u7684\u8bca\u65ad\u65e5\u5fd7\u53ef\u89c6\u5316\u3002\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-20T20:27:21+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-29T13:25:11+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d45ac37434c4406ca3289\/2-0.png\" \/>\n<meta name=\"author\" content=\"\u96c5, \u609f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u96c5, \u609f\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8kibana%e4%b8%ad%e5%91%88%e7%8e%b0azure-appservice%e7%9a%84%e8%af%8a%e6%96%ad%e6%97%a5%e5%bf%97%e5%8f%af%e8%a7%86%e5%8c%96%e3%80%82\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8kibana%e4%b8%ad%e5%91%88%e7%8e%b0azure-appservice%e7%9a%84%e8%af%8a%e6%96%ad%e6%97%a5%e5%bf%97%e5%8f%af%e8%a7%86%e5%8c%96%e3%80%82\/\",\"name\":\"\u5728Kibana\u4e2d\u5448\u73b0Azure AppService\u7684\u8bca\u65ad\u65e5\u5fd7\u53ef\u89c6\u5316 - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2023-08-20T20:27:21+00:00\",\"dateModified\":\"2024-04-29T13:25:11+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/f044a4b7fa4ee2701702942002419ca6\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8kibana%e4%b8%ad%e5%91%88%e7%8e%b0azure-appservice%e7%9a%84%e8%af%8a%e6%96%ad%e6%97%a5%e5%bf%97%e5%8f%af%e8%a7%86%e5%8c%96%e3%80%82\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8kibana%e4%b8%ad%e5%91%88%e7%8e%b0azure-appservice%e7%9a%84%e8%af%8a%e6%96%ad%e6%97%a5%e5%bf%97%e5%8f%af%e8%a7%86%e5%8c%96%e3%80%82\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8kibana%e4%b8%ad%e5%91%88%e7%8e%b0azure-appservice%e7%9a%84%e8%af%8a%e6%96%ad%e6%97%a5%e5%bf%97%e5%8f%af%e8%a7%86%e5%8c%96%e3%80%82\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u5728Kibana\u4e2d\u5448\u73b0Azure AppService\u7684\u8bca\u65ad\u65e5\u5fd7\u53ef\u89c6\u5316\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/f044a4b7fa4ee2701702942002419ca6\",\"name\":\"\u96c5, \u609f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e71a913e914f1aad1efc391f92084294bac54bc782acd289638580134cf667a6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e71a913e914f1aad1efc391f92084294bac54bc782acd289638580134cf667a6?s=96&d=mm&r=g\",\"caption\":\"\u96c5, \u609f\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/yawu\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8kibana%e4%b8%ad%e5%91%88%e7%8e%b0azure-appservice%e7%9a%84%e8%af%8a%e6%96%ad%e6%97%a5%e5%bf%97%e5%8f%af%e8%a7%86%e5%8c%96%e3%80%82\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u5728Kibana\u4e2d\u5448\u73b0Azure AppService\u7684\u8bca\u65ad\u65e5\u5fd7\u53ef\u89c6\u5316 - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u5728kibana\u4e2d\u5448\u73b0azure-appservice\u7684\u8bca\u65ad\u65e5\u5fd7\u53ef\u89c6\u5316\u3002\/","og_locale":"zh_CN","og_type":"article","og_title":"\u5728Kibana\u4e2d\u5448\u73b0Azure AppService\u7684\u8bca\u65ad\u65e5\u5fd7\u53ef\u89c6\u5316","og_description":"\u9996\u5148 Azure\u63d0\u4f9b\u7684\u6bcf\u9879\u670d\u52a1\u90fd\u5177\u6709\u80fd\u591f\u5c06\u65e5\u5fd7\u8fdb\u884cETL\uff08\u62bd\u53d6\u3001\u8f6c\u6362\u3001\u52a0\u8f7d\uff09\u548c\u5b58\u6863\u7684\u8bca\u65ad\u65e5\u5fd7\u529f\u80fd\u3002\u5728\u8fd9\u7bc7\u6587\u7ae0\u4e2d […]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u5728kibana\u4e2d\u5448\u73b0azure-appservice\u7684\u8bca\u65ad\u65e5\u5fd7\u53ef\u89c6\u5316\u3002\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2023-08-20T20:27:21+00:00","article_modified_time":"2024-04-29T13:25:11+00:00","og_image":[{"url":"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d45ac37434c4406ca3289\/2-0.png"}],"author":"\u96c5, \u609f","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u96c5, \u609f","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"3 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8kibana%e4%b8%ad%e5%91%88%e7%8e%b0azure-appservice%e7%9a%84%e8%af%8a%e6%96%ad%e6%97%a5%e5%bf%97%e5%8f%af%e8%a7%86%e5%8c%96%e3%80%82\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8kibana%e4%b8%ad%e5%91%88%e7%8e%b0azure-appservice%e7%9a%84%e8%af%8a%e6%96%ad%e6%97%a5%e5%bf%97%e5%8f%af%e8%a7%86%e5%8c%96%e3%80%82\/","name":"\u5728Kibana\u4e2d\u5448\u73b0Azure AppService\u7684\u8bca\u65ad\u65e5\u5fd7\u53ef\u89c6\u5316 - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2023-08-20T20:27:21+00:00","dateModified":"2024-04-29T13:25:11+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/f044a4b7fa4ee2701702942002419ca6"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8kibana%e4%b8%ad%e5%91%88%e7%8e%b0azure-appservice%e7%9a%84%e8%af%8a%e6%96%ad%e6%97%a5%e5%bf%97%e5%8f%af%e8%a7%86%e5%8c%96%e3%80%82\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8kibana%e4%b8%ad%e5%91%88%e7%8e%b0azure-appservice%e7%9a%84%e8%af%8a%e6%96%ad%e6%97%a5%e5%bf%97%e5%8f%af%e8%a7%86%e5%8c%96%e3%80%82\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8kibana%e4%b8%ad%e5%91%88%e7%8e%b0azure-appservice%e7%9a%84%e8%af%8a%e6%96%ad%e6%97%a5%e5%bf%97%e5%8f%af%e8%a7%86%e5%8c%96%e3%80%82\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u5728Kibana\u4e2d\u5448\u73b0Azure AppService\u7684\u8bca\u65ad\u65e5\u5fd7\u53ef\u89c6\u5316"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/f044a4b7fa4ee2701702942002419ca6","name":"\u96c5, \u609f","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e71a913e914f1aad1efc391f92084294bac54bc782acd289638580134cf667a6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e71a913e914f1aad1efc391f92084294bac54bc782acd289638580134cf667a6?s=96&d=mm&r=g","caption":"\u96c5, \u609f"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/yawu\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%9c%a8kibana%e4%b8%ad%e5%91%88%e7%8e%b0azure-appservice%e7%9a%84%e8%af%8a%e6%96%ad%e6%97%a5%e5%bf%97%e5%8f%af%e8%a7%86%e5%8c%96%e3%80%82\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/41208","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=41208"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/41208\/revisions"}],"predecessor-version":[{"id":87728,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/41208\/revisions\/87728"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=41208"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=41208"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=41208"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}