ELK安装问题：

1、此时不应有 \Java\jdk1.8.0_25

解决方案：安装时C:\Program Files (x86)有空格，换一个没有空格的安装路径

2、
D:\ELK\logstash-2.3.2\bin>logstash agent -f config/log4j_to_es.conf
io/console not supported; tty will not be manipulated
�[31mtranslation missing: en.logstash.runner.configuration.file-not-found {:leve
l=>:error}�[0m
The signal HUP is in use by the JVM and will not work correctly on this platform

修改配置文件在bin目录下

3、D:\ELK\logstash-2.4.0\bin>logstash agent -f log4j_to_es.conf
�[31mfetched an invalid config {:config=>"?input {\n log4j {\n mode => "ser
ver"\n host => "localhost"\n port => 16311\n }\n}\nfilter {\n}\noutput
{\n elasticsearch {\n action => "index" #The operation on ES\n
hosts => "localhost:9200" #ElasticSearch host, can be array.\n index
=> "applog" #The index to write data to.\n }\n}\n", :reason=>"Expecte
d one of #, input, filter, output at line 1, column 1 (byte 1) after ", :level=>
:error}�[0m
The signal HUP is in use by the JVM and will not work correctly on this platform

编码方式改为utf-8 无BOM

4、
compile group: 'net.logstash.logback', name: 'logstash-logback-encoder', version: '4.7'