1. 配置文件 filebeat-prod.yml
#监控的日志文件 paths: - /usr/local/project/logs/*.log output.kafka: enabled: true hosts: ["10.10.183.152:9092","10.10.183.153:9092","10.10.183.154:9092"]#Kafka集群机器地址 topic: monitorLog
2. 复制启动脚本:filebeat.sh
#!/bin/bash echo "copy filebeat soft" #将软件复制到其他服务器 ansible XX -m copy -a "src=/usr/local/soft/filebeat-7.1.0-linux-x86_64.tar.gz dest=/usr/local/soft" #解压文件 ansible XX -m shell -a "tar -xzvf /usr/local/soft/filebeat-7.1.0-linux-x86_64.tar.gz -C /usr/local/soft " #配置文件复制 ansible XX -m copy -a "src=/usr/local/soft/filebeat-controller/filebeat-prod.yml dest=/usr/local/soft/filebeat-7.1.0-linux-x86_64" #启动命令 #/usr/local/soft/filebeat-7.1.0-linux-x86_64/filebeat -e -c /usr/local/soft/filebeat-7.1.0-linux-x86_64/filebeat.yml echo "copy filebeat end"