编写dockerfile
vi Dockerfile
FROM docker.elastic.co/logstash/logstash:7.15.2
RUN rm -f /usr/share/logstash/pipeline/logstash.conf
ADD pipeline/ /usr/share/logstash/pipeline/
ADD config/ /usr/share/logstash/config/
VOLUME [/var/log/]
CMD ["-f","/usr/share/logstash/config/logstash.conf"]
在dockerfile同路径下创建pipeline、config目录,并创建配置文件
编写logstash配置文件
vi config/logstash.conf
# Sample Logstash configuration for creating a simple
# Beats -> Logstash -> Elasticsearch pipeline.
input