ELK安装文档：
http://cuidehua.blog.51cto.com/5449828/1769525
如何将客户端日志通过ogstash-forwarder发送给服务端的logstash
http://cuidehua.blog.51cto.com/5449828/1771979
elk的搜索常用 基于lucence
http://cuidehua.blog.51cto.com/5449828/1772356
elk入门概念详解
http://cuidehua.blog.51cto.com/5449828/1773685