filebeat-7.10.0 安装

1 系统初始化

系统版本 ： CentOS 7.6

sed -i 's/enforcing/disabled/g'  /etc/selinux/config
setenforce 0
sed -i 's/#UseDNS yes/UseDNS no/g'   /etc/ssh/sshd_config
systemctl   restart sshd
grep DNS               /etc/ssh/sshd_config
grep SELINUX=disabled  /etc/selinux/config 
systemctl  disable firewalld  NetworkManager
systemctl  stop    firewalld    NetworkManager

2 下载安装包

wget  https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.10.0-x86_64.rpm  -P /opt/

3 安装filebeat

yum -y install /opt/filebeat-7.10.0-x86_64.rpm

4 调试命令

stdin 2 console

cat >  /etc/filebeat/stdin-console.yml << EOF 
filebeat.inputs:
- type: stdin

output.console:
  pretty: true
  EOF

filebeat  -c /etc/filebeat/stdin-console.yml    -e

file 2 kafka

cat  file2kafka.yml 
filebeat.inputs:
- type: log
  enabled: true
  paths:
    - /var/log/messages
output.kafka:
  hosts: ["192.168.3.13:9092"]
  topic: quickstart-events

执行前使filebeat从头读取文件

rm -rf  /var/lib/filebeat/registry/filebeat/log.json
filebeat  -c /etc/filebeat/file2kafka.yml -e