cd /data/logsecho {\T1\:\2023-07-26\} t1.log ; echo {\T2\:\2023-07-26\} t2.log#查看索引curl http://192.168.10.14:9200/_cat/indices?pretty -u elastic:vsUZGKNvjWRtTKPmDG#kibana创建索引视图#frostmourne部署mkdir /data/frostmourne#创建数据库#CREATE DATABASE frostmourne DEFAULT CHARACTER SET utf8mb4;#导入sql备份mysql -uroot -pX -h192.168.10.14#docker-compose.yaml配置version: 3.6 services: frostmourne-monitor: image: registry.cn-hangzhou.aliyuncs.com/kechangqing/frostmourne:1.0 container_name: frostmourne-monitor environment: datasource_frostmourne_url: jdbc:mysql://192.168.10.14:3306/frostmourne?useSSLfalseverifyServerCertificatefalseuseUnicodetruecharacterEncodingutf- 8allowMultiQueriestrueserverTimezoneGMT%2B8 datasource_frostmourne_username: root datasource_frostmourne_password: MFkda949qr frostmourne_monitor_address: http://192.168.10.14:10054 # initial_password: monitor2023 alarmlog_reserve_days: 30 ports: - 10054:10054 # expose: # - 10054 networks: - meta command: bash -c /opt/frostmourne/start.sh networks: meta: external: true#启动服务docker-compose up -d#验证http://192.168.10.14:10054账号admin密码123456#配置数据源#带密码方式#配置数据名索引模式)timestamp#查询结果#监控查询配置doc/wiki/query-string.md · monitor_group/frostmourne - Gitee.comQuery string query | Elasticsearch Reference如查询message中T2出现的次数#告警输出