Flume 几个例子

楔子

最近看了看Flume，做个笔记，方便下次快速找到

安装

Flume 安装设置 配置文件flume-env.sh 的JAVA_HOME即可

1.1 监听 端口数据

Telnet localhost 44444 输入

## fileName flume-telnet.conf
#Name the components on this agent
a1.sources = r1
a1.sinks = k1
a1.channels = c1

# Describe/configure the source
a1.sources.r1.type = netcat
a1.sources.r1.bind = localhost
a1.sources.r1.port = 44444

# Describe the sink
a1.sinks.k1.type = logger

# Use a channel which buffers events in memory
a1.channels.c1.type = memory
a1.channels.c1.capacity = 1000
a1.channels.c1.transactionCapacity = 100

# Bind the source and sink to the channel
a1.sources.r1.channels = c1
a1.sinks.k1.channel = c1

执行

bin/flume-ng agent 
--conf conf/  ## 此文件是 flume的配置文件
--name a1 
--conf-file job/flume-telnet.conf## Flume Agent
-Dflume.root.logger==INFO,console

1.2 读取文件到HDFS

看的资料里面复制了Hadoop的jar，但是我没复制也能 实现读取文件到HHDFS
资料里面复制的jar如下
hadoop-auth-2.5.0-cdh5.3.6.jar
hadoop/common/lib/commons-configuration-1.6.jar
hadoop/mapreduce1/lib/hadoop-hdfs-2.5.0-cdh5.3.6.jar
hadoop/common/hadoop-common-2.5.0-cdh5.3.6.jar
hadoop/hdfs/lib/htrace-core-3.1.0-incubating.jar
hadoop/hdfs/lib/commons-io-2.4.jar

创建flume-hdfs.conf

# Name the components on this agent
ahdfs.sources = r2
ahdfs.sinks = k2
ahdfs.channels = c2

# Describe/configure the source
ahdfs.sources.r2.type = exec
ahdfs.sources.r2.command = tail -F /usr/local/nginx/logs/access.log
ahdfs.sources.r2.shell = /bin/bash -c

# Describe the sink
ahdfs.sinks.k2.type = hdfs
ahdfs.sinks.k2.hdfs.path = hdfs://had1/flume/%Y%m%d/%H
#上传文件的前缀
ahdfs.sinks.k2.hdfs.filePrefix = logs-
#是否按照时间滚动文件夹
ahdfs.sinks.k2.hdfs.round = true
#多少时间单位创建一个新的文件夹
ahdfs.sinks.k2.hdfs.roundValue = 1
#重新定义时间单位
ahdfs.sinks.k2.hdfs.roundUnit = hour
#是否使用本地时间戳
ahdfs.sinks.k2.hdfs.useLocalTimeStamp = true
#积攒多少个Event才flush到HDFS一次
ahdfs.sinks.k2.hdfs.batchSize = 1000
#设置文件类型，可支持压缩
ahdfs.sinks.k2.hdfs.fileType = DataStream
#多久生成一个新的文件
ahdfs.sinks.k2.hdfs.rollInterval = 600
#设置每个文件的滚动大小
ahdfs.sinks.k2.hdfs.rollSize = 134217700
#文件的滚动与Event数量无关
ahdfs.sinks.k2.hdfs.rollCount = 0
#最小冗余数
ahdfs.sinks.k2.hdfs.minBlockReplicas = 1

# Use a channel which buffers events in memory
ahdfs.channels.c2.type = memory
ahdfs.channels.c2.capacity = 1000
ahdfs.channels.c2.transactionCapacity = 100

# Bind the source and sink to the channel
ahdfs.sources.r2.channels = c2
ahdfs.sinks.k2.channel = c2

执行监控配置

bin/flume-ng agent --conf conf/ --name ahdfs--conf-file job/flume-hdfs.conf

1.3 读取目录文件到HDFS

创建配置文件

a3.sources = r3
a3.sinks = k3
a3.channels = c3

# Describe/configure the source
a3.sources.r3.type = spooldir
a3.sources.r3.spoolDir =/usr/local/nginx/html/img 
a3.sources.r3.fileHeader = true
a3.sources.r3.fileSuffix = .COMPLETED
#忽略所有以.tmp结尾的文件，不上传
a3.sources.r3.ignorePattern = ([^ ]*\.tmp)

# Describe the sink
a3.sinks.k3.type = hdfs
# hdfs目录可以不必手动创建
a3.sinks.k3.hdfs.path = hdfs://had1/flume/upload/%Y%m%d/%H
#上传文件的前缀
a3.sinks.k3.hdfs.filePrefix = upload-
#是否按照时间滚动文件夹
a3.sinks.k3.hdfs.round = true
#多少时间单位创建一个新的文件夹
a3.sinks.k3.hdfs.roundValue = 1
#重新定义时间单位
a3.sinks.k3.hdfs.roundUnit = hour
#是否使用本地时间戳
a3.sinks.k3.hdfs.useLocalTimeStamp = true
#积攒多少个Event才flush到HDFS一次
a3.sinks.k3.hdfs.batchSize = 100
#设置文件类型，可支持压缩
a3.sinks.k3.hdfs.fileType = DataStream
#多久生成一个新的文件
a3.sinks.k3.hdfs.rollInterval = 600
#设置每个文件的滚动大小
a3.sinks.k3.hdfs.rollSize = 134217700
#文件的滚动与Event数量无关
a3.sinks.k3.hdfs.rollCount = 0
#最小冗余数
a3.sinks.k3.hdfs.minBlockReplicas = 1

# Use a channel which buffers events in memory
a3.channels.c3.type = memory
a3.channels.c3.capacity = 1000
a3.channels.c3.transactionCapacity = 100

# Bind the source and sink to the channel
a3.sources.r3.channels = c3
a3.sinks.k3.channel = c3

notice

需要注意的是 文件的编码，默认是UTF-8,如果文件是GBK编码的 ，上述还需要指定编码

执行监控配置

bin/flume-ng agent --conf conf/ --name a3 --conf-file job/flume-dir.conf

1.4 flume之间数据传递

但Flume 多Channel 、Sink

---

实现如下需求：
使用 flume-1 监控文件变动，flume-1 将变动内容传递给 flume-2，flume-2 负责存储到HDFS。同时 flume-1 将变动内容传递给 flume-3，flume-3 负责输出到。local filesystem

flum1.conf

创建 flume-1.conf，用于监控 log 文件的变动，同时产生两个 channel 和两个 sink 分
别输送给 flume-2 和 flume3：

# Name the components on this agent
a1.sources = r1
# sink 空格隔开
a1.sinks = k1 k2
a1.channels = c1 c2
# 将数据流复制给多个channel
a1.sources.r1.selector.type = replicating

# Describe/configure the source
a1.sources.r1.type = exec
a1.sources.r1.command = tail -F /opt/flume170/logs/flume.log
a1.sources.r1.shell = /bin/bash -c

# Describe the sink 数据不落地 给下一个flume 的 source
a1.sinks.k1.type = avro
a1.sinks.k1.hostname = had2
a1.sinks.k1.port = 4141

a1.sinks.k2.type = avro
a1.sinks.k2.hostname = had2
a1.sinks.k2.port = 4142

# Describe the channel
a1.channels.c1.type = memory
a1.channels.c1.capacity = 1000
a1.channels.c1.transactionCapacity = 100

a1.channels.c2.type = memory
a1.channels.c2.capacity = 1000
a1.channels.c2.transactionCapacity = 100

# Bind the source and sink to the channel
a1.sources.r1.channels = c1 c2
a1.sinks.k1.channel = c1
a1.sinks.k2.channel = c2

flum2.conf

创建 flume-2.conf，用于接收 flume-1 的 event，同时产生 1 个 channel 和 1 个 sink，将数
据输送给 hdfs

# Name the components on this agent
a2.sources = r1
a2.sinks = k1
a2.channels = c1

# Describe/configure the source
a2.sources.r1.type = avro
a2.sources.r1.bind = had2
a2.sources.r1.port = 4141

# Describe the sink
a2.sinks.k1.type = hdfs
a2.sinks.k1.hdfs.path = hdfs://had1/flume2/%Y%m%d/%H
#上传文件的前缀
a2.sinks.k1.hdfs.filePrefix = flume2-
#是否按照时间滚动文件夹
a2.sinks.k1.hdfs.round = true
#多少时间单位创建一个新的文件夹
a2.sinks.k1.hdfs.roundValue = 1
#重新定义时间单位
a2.sinks.k1.hdfs.roundUnit = hour
#是否使用本地时间戳
a2.sinks.k1.hdfs.useLocalTimeStamp = true
#积攒多少个Event才flush到HDFS一次
a2.sinks.k1.hdfs.batchSize = 100
#设置文件类型，可支持压缩
a2.sinks.k1.hdfs.fileType = DataStream
#多久生成一个新的文件
a2.sinks.k1.hdfs.rollInterval = 600
#设置每个文件的滚动大小大概是128M
a2.sinks.k1.hdfs.rollSize = 134217700
#文件的滚动与Event数量无关
a2.sinks.k1.hdfs.rollCount = 0
#最小冗余数
a2.sinks.k1.hdfs.minBlockReplicas = 1


# Describe the channel
a2.channels.c1.type = memory
a2.channels.c1.capacity = 1000
a2.channels.c1.transactionCapacity = 100

# Bind the source and sink to the channel
a2.sources.r1.channels = c1
a2.sinks.k1.channel = c1

flum3.conf

创建 flume-3.conf，用于接收 flume-1 的 event，同时产生 1 个 channel 和 1 个 sink，将数
据输送给本地目录

# Name the components on this agent
a3.sources = r1
a3.sinks = k1
a3.channels = c1

# Describe/configure the source
a3.sources.r1.type = avro
a3.sources.r1.bind = had2
a3.sources.r1.port = 4142

# Describe the sink
a3.sinks.k1.type = file_roll
# 输出的本地目录必须是已经存在的目录，如果该目录不存在，并不会创建新的目
录
a3.sinks.k1.sink.directory = /opt/flume170/data/flume3

# Describe the channel
a3.channels.c1.type = memory
a3.channels.c1.capacity = 1000
a3.channels.c1.transactionCapacity = 100

# Bind the source and sink to the channel
a3.sources.r1.channels = c1
a3.sinks.k1.channel = c1

执行监控配置

$ bin/flume-ng agent --conf conf/ --name a3 --conf-file job/group-job1/flume3.conf
$ bin/flume-ng agent --conf conf/ --name a2 --conf-file job/group-job1/flume2.conf
$ bin/flume-ng agent --conf conf/ --name a1 --conf-file job/group-job1/flume1.conf