搞了无数次的filebeat-->logstash今天栽了跟头
filebeat在读取如下文件的时候，openchgw.log 软连接speechgw.log.20170703183729文件
lrwxrwxrwx 1 admin admin 44 Jul 3 18:37 speechgw.log -> /home/admin/logs/speechgw.log.20170703183729
如果filebeat中配置
#=========================== Filebeat prospectors ============================= filebeat.prospectors: # Each - is a prospector. Most options can be set at the prospector level, so # you can use different prospectors for various configurations. # Below are the prospector specific configurations. - input_type: log paths: - /home/admin/logs/speechgw.log document_type: open-gw
则不会收取日志，必须配置如下成实体文件，才能够成功。
#=========================== Filebeat prospectors ============================= filebeat.prospectors: # Each - is a prospector. Most options can be set at the prospector level, so # you can use different prospectors for various configurations. # Below are the prospector specific configurations. - input_type: log paths: - /home/admin/logs/speechgw.log.20170703183729
document_type: open-gw
感觉ELK是不是应该修复一下这个问题。
在filebeat.full.yml中开启参数
symlinks: true
解决问题。多谢zolinxu 2018-02-28的指教。
谢谢！