[root@10-19-148-59 etc]# vim front_esb.conf

input {
        beats {
          type => beats
          port => 5077
        }
}
filter {
        if [type] == 'test-front' {
            grok {
                overwrite => ['message']
                }
        }
        if [type] == 'test-esb' {
            grok {
                overwrite => ['message']
                }
        }

}
output {
        if [type] == 'test-front' {
        elasticsearch {
           hosts => ["10.19.148.59:9200"]
           index => "test-front-%{+YYYY.MM.dd}"
        }
}
        if [type] == 'test-esb' {
        elasticsearch {
           hosts => ["10.19.148.59:9200"]
           index => "test-esb-%{+YYYY.MM.dd}"
        }
}
}

 我这里的日志采集用的是filebeat 来采集日志的

 

相关文章:

  • 2021-12-09
  • 2021-04-17
  • 2021-11-27
  • 2022-12-23
  • 2022-12-23
  • 2021-08-09
  • 2022-12-23
猜你喜欢
  • 2022-12-23
  • 2021-10-27
  • 2021-07-02
  • 2022-02-15
  • 2021-08-16
  • 2021-12-21
  • 2022-12-23
相关资源
相似解决方案