You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
38 lines
770 B
38 lines
770 B
2 years ago
|
filebeat.inputs:
|
||
|
|
- type: log
|
||
|
|
enabled: true
|
||
|
|
paths:
|
||
|
|
# 当前目录下的所有.log文件
|
||
|
|
- /home/project/elk/logs/*.log
|
||
|
|
multiline.pattern: ^\[
|
||
|
|
multiline.negate: true
|
||
|
|
multiline.match: after
|
||
|
|
- type: tcp
|
||
|
|
enabled: true
|
||
|
|
max_message_size: 10MiB
|
||
|
|
host: "0.0.0.0:9000"
|
||
|
|
|
||
|
|
filebeat.config.modules:
|
||
|
|
path: ${path.config}/modules.d/*.yml
|
||
|
|
reload.enabled: false
|
||
|
|
|
||
|
|
setup.template.settings:
|
||
|
|
index.number_of_shards: 1
|
||
|
|
|
||
|
|
setup.dashboards.enabled: false
|
||
|
|
|
||
|
|
setup.kibana:
|
||
|
|
host: "http://kibana:5601"
|
||
|
|
|
||
|
|
# 不直接传输至ES
|
||
|
|
#output.elasticsearch:
|
||
|
|
# hosts: ["http://es-master:9200"]
|
||
|
|
# index: "filebeat-%{[beat.version]}-%{+yyyy.MM.dd}"
|
||
|
|
|
||
|
|
output.logstash:
|
||
|
|
hosts: ["logstash:5044"]
|
||
|
|
|
||
|
|
processors:
|
||
|
|
- add_host_metadata: ~
|
||
|
|
- add_cloud_metadata: ~
|