ELK之Logstash配置

# logstash.yml配置
node.name: test
path.data: /var/lib/logstash
path.config: /etc/logstash/conf.d
http.host: "192.168.32.166"
http.port: 9600-9700
path.logs: /var/log/logstash
-----------------------------------------------
# 搜索日志文件配置app.conf
input {
  tcp {
    host => "192.168.32.166" 
    port => 9250
    mode => "server"
    tags => ["tags"]
    codec => json_lines
    codec => plain { charset => "UTF8" }
  }
}
output {
 stdout{codec =>rubydebug}
  elasticsearch {
   hosts => ["192.168.32.166:9200"]
   index => "applog"
   flush_size => 1000
  }
}

# java - Demo

package com;
// log4j
//import org.apache.log4j.Logger;

// slf4j
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

public class Test {
    // sl4f
    private static final Logger LOGGER= LoggerFactory.getLogger(Test.class);
    //log4j
    //public static final Logger LOGGER=Logger.getLogger(Test.class);
    public static void main(String[] args) throws Exception {
        for (int i = 0; i < 10; i++) {
            LOGGER.error("+++++++++++ [" + i + "测试logstash]");
            Thread.sleep(500);
        }
    }
}

----------------------------------
# log4j日志文件配置log4j.properties
log4j.rootLogger=INFO,console,socket
log4j.appender.file.encoding=UTF-8

# appender socket
log4j.appender.socket=org.apache.log4j.net.SocketAppender
log4j.appender.socket.Port=9250
log4j.appender.socket.RemoteHost=192.168.32.166
log4j.appender.socket.layout=org.apache.log4j.PatternLayout
log4j.appender.socket.layout.ConversionPattern=%d [%-5p] [%l] %m%n
log4j.appender.socket.ReconnectionDelay=10000

# appender console
log4j.appender.console=org.apache.log4j.ConsoleAppender
log4j.appender.console.target=System.out
log4j.appender.console.layout=org.apache.log4j.PatternLayout
log4j.appender.console.layout.ConversionPattern=%d [%-5p] [%l] %m%n

-------------------------------------------------------------------------
# slf4j日志配置logback.xml


    
    
        
            %d{HH:mm:ss.SSS} [%thread] %-5level %logger - %msg%n
        
    
    
        192.168.32.166:9250