filebeat

wget https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-6.5.1-linux-x86_64.tar.gz

cd filebeat

vim filebeat.yml : add

 paths:
    - /var/test.log

output.elasticsearch:
  # Array of hosts to connect to.
  hosts: ["192.168.24.188:9200"]

启动 ： ./filebeat -e -c filebeat.yml -d “publish”

echo 111111111 > /var/test.log

====================================================

ilebeat  ->  logstashf

output.logstash:
  hosts: ["localhost:5044"]

 

input{
        beats{
                port => 5044
        }
}
output{
        stdout{
                codec=>rubydebug
        }
}

echo filebeat-test.log-logstash > /var/test.log

==========================

• packetbeat 侧重于收集网络包
• topbeat 侧重于收集基础架构信息，如CPU，Memory，Progress 相关信息
• filebeat 侧重于收集日志型信息
•