filebeat.yml 770 B

12345678910111213141516171819202122232425262728293031323334353637
  1. filebeat.inputs:
  2. - type: log
  3. enabled: true
  4. paths:
  5. # 当前目录下的所有.log文件
  6. - /home/project/elk/logs/*.log
  7. multiline.pattern: ^\[
  8. multiline.negate: true
  9. multiline.match: after
  10. - type: tcp
  11. enabled: true
  12. max_message_size: 10MiB
  13. host: "0.0.0.0:9000"
  14. filebeat.config.modules:
  15. path: ${path.config}/modules.d/*.yml
  16. reload.enabled: false
  17. setup.template.settings:
  18. index.number_of_shards: 1
  19. setup.dashboards.enabled: false
  20. setup.kibana:
  21. host: "http://kibana:5601"
  22. # 不直接传输至ES
  23. #output.elasticsearch:
  24. # hosts: ["http://es-master:9200"]
  25. # index: "filebeat-%{[beat.version]}-%{+yyyy.MM.dd}"
  26. output.logstash:
  27. hosts: ["logstash:5044"]
  28. processors:
  29. - add_host_metadata: ~
  30. - add_cloud_metadata: ~