flumeng收集日志并存储到HDFS

两台机器agent1收集日志,传送到agent3,agent3上传日志到HDFS

agent1配置:

agent1.sources=s1
agent1.channels=c1
agent1.sinks=k1


agent1.sources.s1.type = spooldir
agent1.sources.s1.spoolDir = /var/log/hutxlog
agent1.sources.s1.fileHeader =false
agent1.sources.s1.channels = c1


agent1.sinks.k1.channel=c1
agent1.sinks.k1.type=avro
agent1.sinks.k1.hostname=10.1.72.97
agent1.sinks.k1.port=12343
agent1.channels.c1.type=memory


agent1.sinks.sink-1.type = hdfs
agent1.sinks.sink-1.hdfs.kerberosPrincipal=$KERBEROS_PRINCIPAL
agent1.sinks.sink-1.hdfs.kerberosKeytab =$KERBEROS_KEYTAB
agent1.sinks.sink-1.hdfs.proxyUser = weblogs

agent3配置

agent3.channels.ch1.type = memory
agent3.sources.avro-source1.channels = ch1
agent3.sources.avro-source1.type = avro
agent3.sources.avro-source1.bind = 0.0.0.0
agent3.sources.avro-source1.port = 12343

agent3.sinks.log-sink1.type=hdfs
agent3.sinks.log-sink1.channel=ch1
agent3.sinks.log-sink1.hdfs.path=hdfs://10.1.72.94:8020/hutx
agent3.sinks.log-sink1.hdfs.fileType=DataStream
agent3.sinks.log-sink1.hdfs.writeFormat=TEXT
agent3.sinks.log-sink1.hdfs.rollInterval=4

agent3.channels = ch1
agent3.sources = avro-source1
agent3.sinks = log-sink1

agent3.sinks.log-sink1.type = hdfs
agent3.sinks.log-sink1.hdfs.kerberosPrincipal=$KERBEROS_PRINCIPAL
agent3.sinks.log-sink1.hdfs.kerberosKeytab =$KERBEROS_KEYTAB

结果

下午3点05:51.301	INFO	org.apache.flume.instrumentation.MonitoredCounterGroup	
Shutdown Metric for type: CHANNEL, name: ch1. channel.capacity == 100
下午3点05:51.301	INFO	org.apache.flume.instrumentation.MonitoredCounterGroup	
Shutdown Metric for type: CHANNEL, name: ch1. channel.current.size == 95
下午3点05:51.301	INFO	org.apache.flume.instrumentation.MonitoredCounterGroup	
Shutdown Metric for type: CHANNEL, name: ch1. channel.event.put.attempt == 95
下午3点05:51.301	INFO	org.apache.flume.instrumentation.MonitoredCounterGroup	
Shutdown Metric for type: CHANNEL, name: ch1. channel.event.put.success == 95
下午3点05:51.301	INFO	org.apache.flume.instrumentation.MonitoredCounterGroup	
Shutdown Metric for type: CHANNEL, name: ch1. channel.event.take.attempt == 47
下午3点05:51.301	INFO	org.apache.flume.instrumentation.MonitoredCounterGroup	
Shutdown Metric for type: CHANNEL, name: ch1. channel.event.take.success == 0
下午3点05:51.301	INFO	org.mortbay.log	
Stopped SelectChannelConnector@0.0.0.0:41414
下午3点06:03.092	INFO	org.apache.flume.node.PollingPropertiesFileConfigurationProvider	
Configuration provider starting
下午3点06:03.122	INFO	org.apache.flume.node.PollingPropertiesFileConfigurationProvider	
Reloading configuration file:/var/run/cloudera-scm-agent/process/1444-flume-AGENT/flume.conf
下午3点06:03.127	INFO	org.apache.flume.conf.FlumeConfiguration	
Processing:log-sink1
下午3点06:03.128	INFO	org.apache.flume.conf.FlumeConfiguration	
Processing:log-sink1
下午3点06:03.128	INFO	org.apache.flume.conf.FlumeConfiguration	
Processing:log-sink1
下午3点06:03.129	INFO	org.apache.flume.conf.FlumeConfiguration	
Processing:log-sink1
下午3点06:03.129	INFO	org.apache.flume.conf.FlumeConfiguration	
Processing:log-sink1
下午3点06:03.129	INFO	org.apache.flume.conf.FlumeConfiguration	
Added sinks: log-sink1 Agent: agent3
下午3点06:03.129	INFO	org.apache.flume.conf.FlumeConfiguration	
Processing:log-sink1
下午3点06:03.129	INFO	org.apache.flume.conf.FlumeConfiguration	
Processing:log-sink1
下午3点06:03.129	INFO	org.apache.flume.conf.FlumeConfiguration	
Processing:log-sink1
下午3点06:03.155	INFO	org.apache.flume.conf.FlumeConfiguration	
Post-validation flume configuration contains configuration for agents: [agent3]
下午3点06:03.156	INFO	org.apache.flume.node.AbstractConfigurationProvider	
Creating channels
下午3点06:03.166	INFO	org.apache.flume.channel.DefaultChannelFactory	
Creating instance of channel ch1 type memory
下午3点06:03.172	INFO	org.apache.flume.node.AbstractConfigurationProvider	
Created channel ch1
下午3点06:03.173	INFO	org.apache.flume.source.DefaultSourceFactory	
Creating instance of source avro-source1, type avro
下午3点06:03.196	INFO	org.apache.flume.sink.DefaultSinkFactory	
Creating instance of sink: log-sink1, type: hdfs
下午3点06:03.786	INFO	org.apache.flume.sink.hdfs.HDFSEventSink	
Hadoop Security enabled: true
下午3点06:03.816	INFO	org.apache.flume.sink.hdfs.HDFSEventSink	
{ Sink type:HDFSEventSink, name:log-sink1 }: Attempting kerberos login as principal (flume/gcstat3@CDH) from keytab file (/var/run/cloudera-scm-agent/process/1444-flume-AGENT/flume.keytab)
下午3点06:04.107	INFO	org.apache.hadoop.security.UserGroupInformation	
Login successful for user flume/gcstat3@CDH using keytab file /var/run/cloudera-scm-agent/process/1444-flume-AGENT/flume.keytab
下午3点06:04.107	INFO	org.apache.flume.sink.hdfs.HDFSEventSink	
Auth method: KERBEROS
下午3点06:04.107	INFO	org.apache.flume.sink.hdfs.HDFSEventSink	
User name: flume/gcstat3@CDH
下午3点06:04.107	INFO	org.apache.flume.sink.hdfs.HDFSEventSink	
Using keytab: true
下午3点06:04.108	INFO	org.apache.flume.sink.hdfs.HDFSEventSink	
Logged in as user flume/gcstat3@CDH
下午3点06:04.112	INFO	org.apache.flume.node.AbstractConfigurationProvider	
Channel ch1 connected to [avro-source1, log-sink1]
下午3点06:04.121	INFO	org.apache.flume.node.Application	
Starting new configuration:{ sourceRunners:{avro-source1=EventDrivenSourceRunner: { source:Avro source avro-source1: { bindAddress: 0.0.0.0, port: 12343 } }} sinkRunners:{log-sink1=SinkRunner: { policy:org.apache.flume.sink.DefaultSinkProcessor@2f93e4a8 counterGroup:{ name:null counters:{} } }} channels:{ch1=org.apache.flume.channel.MemoryChannel{name: ch1}} }
下午3点06:04.125	INFO	org.apache.flume.node.Application	
Starting Channel ch1
下午3点06:04.180	INFO	org.apache.flume.instrumentation.MonitoredCounterGroup	
Monitored counter group for type: CHANNEL, name: ch1: Successfully registered new MBean.
下午3点06:04.180	INFO	org.apache.flume.instrumentation.MonitoredCounterGroup	
Component type: CHANNEL, name: ch1 started
下午3点06:04.181	INFO	org.apache.flume.node.Application	
Starting Sink log-sink1
下午3点06:04.182	INFO	org.apache.flume.node.Application	
Starting Source avro-source1
下午3点06:04.182	INFO	org.apache.flume.source.AvroSource	
Starting Avro source avro-source1: { bindAddress: 0.0.0.0, port: 12343 }...
下午3点06:04.183	INFO	org.apache.flume.instrumentation.MonitoredCounterGroup	
Monitored counter group for type: SINK, name: log-sink1: Successfully registered new MBean.
下午3点06:04.183	INFO	org.apache.flume.instrumentation.MonitoredCounterGroup	
Component type: SINK, name: log-sink1 started
下午3点06:04.238	INFO	org.mortbay.log	
Logging to org.slf4j.impl.Log4jLoggerAdapter(org.mortbay.log) via org.mortbay.log.Slf4jLog
下午3点06:04.305	INFO	org.mortbay.log	
jetty-6.1.26
下午3点06:04.336	INFO	org.mortbay.log	
Started SelectChannelConnector@0.0.0.0:41414
下午3点06:04.579	INFO	org.apache.flume.instrumentation.MonitoredCounterGroup	
Monitored counter group for type: SOURCE, name: avro-source1: Successfully registered new MBean.
下午3点06:04.579	INFO	org.apache.flume.instrumentation.MonitoredCounterGroup	
Component type: SOURCE, name: avro-source1 started
下午3点06:04.580	INFO	org.apache.flume.source.AvroSource	
Avro source avro-source1 started.
下午3点06:33.731	INFO	org.apache.avro.ipc.NettyServer	
[id: 0x03072115, /10.1.72.94:59951 => /10.1.72.97:12343] OPEN
下午3点06:33.734	INFO	org.apache.avro.ipc.NettyServer	
[id: 0x03072115, /10.1.72.94:59951 => /10.1.72.97:12343] BOUND: /10.1.72.97:12343
下午3点06:33.734	INFO	org.apache.avro.ipc.NettyServer	
[id: 0x03072115, /10.1.72.94:59951 => /10.1.72.97:12343] CONNECTED: /10.1.72.94:59951
下午3点06:34.197	INFO	org.apache.flume.sink.hdfs.HDFSDataStream	
Serializer = TEXT, UseRawLocalFileSystem = false
下午3点06:34.311	INFO	org.apache.flume.sink.hdfs.BucketWriter	
Creating hdfs://10.1.72.94:8020/hutx/FlumeData.1404803194198.tmp
下午3点06:35.644	INFO	org.apache.flume.sink.hdfs.BucketWriter	
Renaming hdfs://10.1.72.94:8020/hutx/FlumeData.1404803194198.tmp to hdfs://10.1.72.94:8020/hutx/FlumeData.1404803194198
下午3点06:35.709	INFO	org.apache.flume.sink.hdfs.BucketWriter	
Creating hdfs://10.1.72.94:8020/hutx/FlumeData.1404803194199.tmp
下午3点06:35.826	INFO	org.apache.flume.sink.hdfs.BucketWriter	
Renaming hdfs://10.1.72.94:8020/hutx/FlumeData.1404803194199.tmp to hdfs://10.1.72.94:8020/hutx/FlumeData.1404803194199
下午3点06:35.879	INFO	org.apache.flume.sink.hdfs.BucketWriter	
Creating hdfs://10.1.72.94:8020/hutx/FlumeData.1404803194200.tmp
下午3点06:35.993	INFO	org.apache.flume.sink.hdfs.BucketWriter	
Renaming hdfs://10.1.72.94:8020/hutx/FlumeData.1404803194200.tmp to hdfs://10.1.72.94:8020/hutx/FlumeData.1404803194200
下午3点06:36.040	INFO	org.apache.flume.sink.hdfs.BucketWriter	
Creating hdfs://10.1.72.94:8020/hutx/FlumeData.1404803194201.tmp
下午3点06:36.151	INFO	org.apache.flume.sink.hdfs.BucketWriter	
Renaming hdfs://10.1.72.94:8020/hutx/FlumeData.1404803194201.tmp to hdfs://10.1.72.94:8020/hutx/FlumeData.1404803194201
下午3点06:36.201	INFO	org.apache.flume.sink.hdfs.BucketWriter	
Creating hdfs://10.1.72.94:8020/hutx/FlumeData.1404803194202.tmp
下午3点06:36.301	INFO	org.apache.flume.sink.hdfs.BucketWriter	
Renaming hdfs://10.1.72.94:8020/hutx/FlumeData.1404803194202.tmp to hdfs://10.1.72.94:8020/hutx/FlumeData.1404803194202
下午3点06:36.344	INFO	org.apache.flume.sink.hdfs.BucketWriter	
Creating hdfs://10.1.72.94:8020/hutx/FlumeData.1404803194203.tmp
下午3点06:36.460	INFO	org.apache.flume.sink.hdfs.BucketWriter	
Renaming hdfs://10.1.72.94:8020/hutx/FlumeData.1404803194203.tmp to hdfs://10.1.72.94:8020/hutx/FlumeData.1404803194203
下午3点06:36.505	INFO	org.apache.flume.sink.hdfs.BucketWriter	
Creating hdfs://10.1.72.94:8020/hutx/FlumeData.1404803194204.tmp
下午3点06:40.568	INFO	org.apache.flume.sink.hdfs.BucketWriter	
Renaming hdfs://10.1.72.94:8020/hutx/FlumeData.1404803194204.tmp to hdfs://10.1.72.94:8020/hutx/FlumeData.1404803194204
下午3点06:40.574	INFO	org.apache.flume.sink.hdfs.HDFSEventSink	
Writer callback called.



评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值