filebeat+logstash

filebeat的使用

=========================== Filebeat prospectors =============================

filebeat.prospectors:

# Each - is a prospector. Most options can be set at the prospector level, so
# you can use different prospectors for various configurations.
# Below are the prospector specific configurations.

- input_type: log

# Paths that should be crawled and fetched. Glob based paths.
paths:
- /Users/Downloads/logs/*.log

# Exclude lines. A list of regular expressions to match. It drops the lines that are
# matching any regular expression from the list.
#exclude_lines: ["^DBG"]

----------------------------- Logstash output --------------------------------
output.logstash:
# The Logstash hosts
hosts: ["host:5044"]

# Optional SSL. By default is off.
# List of root certificates for HTTPS server verifications
#ssl.certificate_authorities: ["/etc/pki/root/ca.pem"]

# Certificate for SSL client authentication
#ssl.certificate: "/etc/pki/client/cert.pem"

# Client Certificate Key
#ssl.key: "/etc/pki/client/cert.key"

配置logstash

#input {
# stdin {}
#}
input{
beats {
host => "127.0.0.1"
port => 5044
}
# log4j {
#        mode => "server"
#        host => "127.0.0.1"
#        port => 4567
#    }
}
output{
stdout {
codec => rubydebug
}
}

echo "123" >> a.log