1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
| filebeat.inputs:
| - type: log
| enabled: true
| paths:
| # 当前目录下的所有.log文件
| - /home/project/elk/logs/*.log
| multiline.pattern: ^\[
| multiline.negate: true
| multiline.match: after
| - type: tcp
| enabled: true
| max_message_size: 10MiB
| host: "0.0.0.0:9000"
|
| filebeat.config.modules:
| path: ${path.config}/modules.d/*.yml
| reload.enabled: false
|
| setup.template.settings:
| index.number_of_shards: 1
|
| setup.dashboards.enabled: false
|
| setup.kibana:
| host: "http://kibana:5601"
|
| # 不直接传输至ES
| #output.elasticsearch:
| # hosts: ["http://es-master:9200"]
| # index: "filebeat-%{[beat.version]}-%{+yyyy.MM.dd}"
|
| output.logstash:
| hosts: ["logstash:5044"]
|
| processors:
| - add_host_metadata: ~
| - add_cloud_metadata: ~
|
|