Filebeat安装部署文档
安装包下载
https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-8.1.3-x86_64.rpm
安装 filebeat
sudo rpm -vi filebeat-8.1.3-x86_64.rpm
配置filebeat.yml
filebeat.inputs:
- type: log
enabled: true
paths:
- /home/Devops/deploy/*/logs/*.log
multiline.pattern: '^[0-9]{4}-[0-9]{2}-[0-9]{2}'
multiline.negate: true
multiline.match: after
output.kafka:
hosts: ["172.16.30.150:9092", "172.16.30.151:9092", "172.16.30.152:9092"]
topic: sys_log_raw_message
enable: true
partition.round_robin:
reachable_only: false
require_acks: 1
compression: gzip
max_message_bytes: 1000000
启动 Filebeat
systemctl start filebeat