filebeat自定义elasticsearch索引

最新推荐文章于 2022-11-18 15:06:34 发布

最新推荐文章于 2022-11-18 15:06:34 发布

阅读量1k

点赞数

分类专栏：随手记文章标签： filebeat

本文链接：https://blog.csdn.net/u013845177/article/details/111182444

版权

随手记专栏收录该内容

35 篇文章 1 订阅

订阅专栏

filebeat.inputs:
- type: log
  enabled: true
  fields:
    type: "info"
  paths:
    - D:\ideaWorkspace\demo\info\*.log
  multiline.pattern: ^[0-9]{4}-[0-9]{2}-[0-9]{2} [0-9]{2}:[0-9]{2}:[0-9]{2}
  multiline.negate: true
  multiline.match: after

- type: log
  enabled: true
  fields:
    type: "error"
  paths:
    - D:\ideaWorkspace\demo\error\*.log
  multiline.pattern: ^[0-9]{4}-[0-9]{2}-[0-9]{2} [0-9]{2}:[0-9]{2}:[0-9]{2}
  multiline.negate: true
  multiline.match: after



output.elasticsearch:
  hosts: ["localhost:9200"]
  indices:
    - index: "infoindex"
      when.equals:
        fields.type: "info"
    - index: "errorindex"
      when.equals:
        fields.type: "error"