===>elasticsearch启动,—是两个-

docker run -d —name zjjelasticsearch -p 9200:9200 -p 9300:9300 elasticsearch

!!!—>docker run -it --entrypoint /bin/bash elasticsearch(交互模式/usr/share目录)

重要:！！！docker run -it  --name zjjelasticsearch --privileged -p 9200:9200 -p 9300:9300 -d temp

===>kibana启动

docker run  --name zjjkibana --link zjjelasticsearch:elasticsearch -p 5601:5601 -d kibana

docker exec -it ‘containerid’ /bin/bash(进入交互模式)

docker run  --name zjjkibana --link zjjelasticsearch:elasticsearch -p 5601:5601 -it  --entrypoint /bin/bash kibana

docker exec -i zjjkibana /bin/bash

kibana.yml地址：/etc/kibana/kibana.yml(交互模式内)

===>log stash启动

docker run -it --rm logstash -e 'input { stdin { } } output { stdout { } }'

docker run -it --rm logstash -e 'input { stdin { } } filter { kv { source => "message" field_split => "|" value_split => "=" } kv { source => "args" field_split => "&" value_split => "=" } } output { elasticsearch {  hosts => [“localhost:9200"] } stdout { codec => rubydebug } }'

Unable to connect to Elasticsearch at http://localhost:9200

==>修改kibana.yml配置，添加elasticsearch.ssl.verify: false

   restart kibana

坑：

1. Docker doesn't release disk space used by `~/Library/Containers/com.docker.docker/ ==>https://github.com/docker/docker/issues/23437

docker容器启动失败

http://blog.csdn.net/fffy2366/article/details/50112535