elk

Posted on | Edited on

elk 这一套用来收集，存储，分析服务日志非常方便。

filebeat

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
filebeat.prospectors:
- input_type: log
  paths:
    - /opt/logs/aether/aether_log_*.log
  fields:
    log_source: 'aether_log'
  multiline:
    pattern: '^\['
    negate: true
    match: after
  scan_frequency: 2s
  max_bytes: 104857600
  tail_files: true
  close_renamed: true
  close_removed: true
  close_inactive: 45m
  force_close_file: true

output.logstash:
  hosts: ["10.95.54.96:5044", "10.95.54.148:5044"]
  worker: 2
  loadbalance: true