1.参考文档

https://doc.yonyoucloud.com/doc/logstash-best-practice-cn/index.html

2. 参数与配置

-e: 执行命令行中配置的参数启动实例 ；./bin/logstash -e ‘input {stdin {}} output {stdout {}}’

-f: 通过配置文件启动实例； ./bin/logstash -f config/logstash.conf

-t: 测试配置文件正确性； ./bin/logstash  -f config/logstash.conf -t

-l: 启动实例后，指定打印日志文件目录； ./bin/logstash-f config/logstash.conf -l logs/logstash.log

-w: 指定filter 线程数量，默认是5； ./bin/logstash-f config/logstash.conf -w 8

3.常用日志解析语法

/usr/local/logstash-6.6.2/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns