Logstash-logbak-input

INFO ${CONSOLE_LOG_PATTERN} utf8 192.168.1.111:8081

# Logstash configuration # TCP -> Logstash -> Elasticsearch pipeline. input { tcp { mode => "server" host => "192.168.1.111" //尽量使用IP port => 8081 //从本地的8081端口取日志 codec => json_lines //需要安装logstash-codec-json_lines插件 } } output { elasticsearch { hosts => ["http://192.168.1.111:9200"] //输出到ElasticSearch index => "logstash-%{+YYYY.MM.dd}" } stdout { //若不需要在控制台中输出，此行可以删除 codec => rubydebug } }

[root@ecs-55e5 ~]# cd /usr/share/logstash/ [root@ecs-55e5 logstash]# ls bin CONTRIBUTORS data Gemfile Gemfile.lock lib LICENSE.txt logstash-core logstash-core-plugin-api modules NOTICE.TXT tools vendor x-pack [root@ecs-55e5 logstash]# cd bin [root@ecs-55e5 bin]# ./logstash-plugin install logstash-codec-json_lines Validating logstash-codec-json_lines Installing logstash-codec-json_lines Installation successful [root@ecs-55e5 bin]#

[root@ecs-55e5 logstash]# logstash -f logstash.conf WARNING: Could not find logstash.yml which is typically located in $LS_HOME/config or /etc/logstash. You can specify the path using --path.settings. Continuing using the defaults Could not find log4j2 configuration at path /usr/share/logstash/config/log4j2.properties. Using default config which logs errors to the console [WARN ] 2019-03-06 14:38:50.990 [LogStash::Runner] multilocal - Ignoring the 'pipelines.yml' file because modules or command line options are specified [INFO ] 2019-03-06 14:38:51.007 [LogStash::Runner] runner - Starting Logstash {"logstash.version"=>"6.5.4"} [INFO ] 2019-03-06 14:38:54.639 [Converge PipelineAction::Create

] pipeline - Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>8, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>50} [INFO ] 2019-03-06 14:38:55.095 [[main]-pipeline-manager] elasticsearch - Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[http://192.168.1.111:9200/]}} [WARN ] 2019-03-06 14:38:55.284 [[main]-pipeline-manager] elasticsearch - Restored connection to ES instance {:url=>"http://192.168.1.111:9200/"} [INFO ] 2019-03-06 14:38:55.549 [[main]-pipeline-manager] elasticsearch - ES Output version determined {:es_version=>6} [WARN ] 2019-03-06 14:38:55.553 [[main]-pipeline-manager] elasticsearch - Detected a 6.x and above cluster: the `type` event field won't be used to determine the document _type {:es_version=>6} [INFO ] 2019-03-06 14:38:55.577 [[main]-pipeline-manager] elasticsearch - New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["http://192.168.1.111:9200"]} [INFO ] 2019-03-06 14:38:55.591 [Ruby-0-Thread-5: :1] elasticsearch - Using mapping template from {:path=>nil} [INFO ] 2019-03-06 14:38:55.608 [Ruby-0-Thread-5: :1] elasticsearch - Attempting to install template {:manage_template=>{"template"=>"logstash-*", "version"=>60001, "settings"=>{"index.refresh_interval"=>"5s"}, "mappings"=>{"_default_"=>{"dynamic_templates"=>[{"message_field"=>{"path_match"=>"message", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false}}}, {"string_fields"=>{"match"=>"*", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false, "fields"=>{"keyword"=>{"type"=>"keyword", "ignore_above"=>256}}}}}], "properties"=>{"@timestamp"=>{"type"=>"date"}, "@version"=>{"type"=>"keyword"}, "geoip"=>{"dynamic"=>true, "properties"=>{"ip"=>{"type"=>"ip"}, "location"=>{"type"=>"geo_point"}, "latitude"=>{"type"=>"half_float"}, "longitude"=>{"type"=>"half_float"}}}}}}}} [INFO ] 2019-03-06 14:38:55.644 [[main]>worker7] tcp - Starting tcp input listener {:address=>"localhost:8081", :ssl_enable=>"false"} [INFO ] 2019-03-06 14:38:55.917 [Converge PipelineAction::Create

] pipeline - Pipeline started successfully {:pipeline_id=>"main", :thread=>"#"} [INFO ] 2019-03-06 14:38:55.952 [Ruby-0-Thread-1: /usr/share/logstash/lib/bootstrap/environment.rb:6] agent - Pipelines running {:count=>1, :running_pipelines=>[:main], :non_running_pipelines=>[]} [INFO ] 2019-03-06 14:38:56.152 [Api Webserver] agent - Successfully started Logstash API endpoint {:port=>9600}

{ "logger_name" => "com.amt.hibei.sysframework.config.SysConfig", "thread_name" => "main", "@timestamp" => 2019-03-06T07:27:26.348Z, "level_value" => 20000, "host" => "182.148.112.187", "port" => 58138, "level" => "INFO", "@version" => "1", "message" => "============系统参数加载完成！==============" } { "logger_name" => "com.amt.hibei.client.HibeiGameClientHiApplication", "thread_name" => "main", "@timestamp" => 2019-03-06T07:27:26.259Z, "level_value" => 20000, "host" => "182.148.112.187", "port" => 58138, "level" => "INFO", "@version" => "1", "message" => "Starting HibeiGameClientHiApplication on Amt-PC with PID 4256 (E:\\IdeWorkspace\\hibeigame\\hibeigame-client-HI\\target\\classes started by amt in E:\\IdeWorkspace\\hibeigame)" }

INFO ${CONSOLE_LOG_PATTERN} utf8 192.168.11.86:9250 UTC { "severity": "%level", "service": "${springAppName:-}", "trace": "%X{X-B3-TraceId:-}", "span": "%X{X-B3-SpanId:-}", "exportable": "%X{X-Span-Export:-}", "pid": "${PID:-}", "thread": "%thread", "class": "%logger{40}", "message": "%message", "timeDate": "%d{yyyy-MM-dd HH:mm:ss.SSS}", "stack_trace": %exception{5}异常信息， "line":"%line"日志行号, "logLevel":"%level", "serviceName":"${spring.application.name}"项目名字，从配置文件中获取 }

Logstash-logbak-input

你可能感兴趣的:(logstash)