配置文件的基本格式,输入部分,过滤器部分和输出部分。
# This is a comment. You should use comments to describe
# parts of your configuration.
input {
...
}
filter {
...
}
output {
...
}
每个部分都可以配置一个或多个插件。下面展示的是输入部分,有两个file插件。
input {
file {
path => "/var/log/messages"
type => "syslog"
}
file {
path => "/var/log/apache/access.log"
type => "apache"
}
}
插件的值类型
数组
path => [ "/var/log/messages", "/var/log/*.log" ]
path => "/data/mysql/mysql.log"
布尔
ssl_enable => true
字符串
name => "Hello world"
name => 'It\'s a beautiful day'
哈希
match => {
"field1" => "value1"
"field2" => "value2"
...
}
字节
my_bytes => "1113" # 1113 bytes
my_bytes => "10MiB" # 10485760 bytes
my_bytes => "100kib" # 102400 bytes
my_bytes => "180 mb" # 180000000 bytes
代码
codec => "json"
数值:浮点或整型
port => 33
密码型:不会记录到日志或打印出来
my_password => "password"
路径型:字符串
my_path => "/tmp/logstash"
注释:使用#
亿速云「云服务器」,即开即用、新一代英特尔至强铂金CPU、三副本存储NVMe SSD云盘,价格低至29元/月。点击查看>>
免责声明:本站发布的内容(图片、视频和文字)以原创、转载和分享为主,文章观点不代表本网站立场,如果涉及侵权请联系站长邮箱:is@yisu.com进行举报,并提供相关证据,一经查实,将立刻删除涉嫌侵权内容。