filebeat.inputs: - type: log enabled: true paths: # 当前目录下的所有.log文件 - /home/project/elk/logs/*.log multiline.pattern: ^\[ multiline.negate: true multiline.match: after - type: tcp enabled: true max_message_size: 10MiB host: "0.0.0.0:9000" filebeat.config.modules: path: ${path.config}/modules.d/*.yml reload.enabled: false setup.template.settings: index.number_of_shards: 1 setup.dashboards.enabled: false setup.kibana: host: "http://kibana:5601" # 不直接传输至ES #output.elasticsearch: # hosts: ["http://es-master:9200"] # index: "filebeat-%{[beat.version]}-%{+yyyy.MM.dd}" output.logstash: hosts: ["logstash:5044"] processors: - add_host_metadata: ~ - add_cloud_metadata: ~