阿里云filebeat配置

filebeat.inputs:
- type: log
  enabled: true
  paths:
    - /root/logs/biz-feed-error.log
  multiline.pattern: '^\['
  multiline.negate: true
  multiline.match: after
  tags: ["biz-feed-error"]
setup.kibana:
  host: "https://xxx:5601"
  user: "username"
  password: "password"

output.elasticsearch:
  hosts: ["http://xxx:9200"]
  username: "username"
  password: "password"
  indices:
    - index: "%{+yyyy.MM.dd}-biz-feed-error"
      when.contains:
        tags: "biz-feed-error"
setup.template.settings:
  index.number_of_shards: 3
processors:
  - add_host_metadata: ~
  - add_cloud_metadata: ~

setup.template.name: "nginx"
setup.template.pattern: "nginx-*"
setup.template.enabled: false
setup.template.overwrite: true

 

你可能感兴趣的:(日志ELK)