ELK 日志系统搭建--监控Tomcat日志

1.tomcat日志存储格式是json

  `{
   
            "roleId": "10",
            "clientip": "127.0.0.1",
            "uripath": "/admin/garten/findCity.do",
            "timestamp": "2018-08-07 09:52:09",
            "username": "anveeno"
        }`

2.logstash添加解析文件 tomcat_access.conf (目录：/etc/logstash/conf.d/)

input {
        file {
            path => [ "/usr/local/*/*/use