logstash 处理tomcat日志

[root@dr-mysql01 tomcat]# cat logstash_tomcat.conf 
input {
        file {
                type => "zj_api"
                path => ["/data01/applog_backup/zjzc_log/zj-api*"]
        }
    
       file { 
                type => "wj_api" 
                path => ["/data01/applog_backup/winfae_log/wj-api*"] 
        } 

 
}

 filter {
    multiline {  
   pattern => "^\s+%{TIMESTAMP_ISO8601}"
  negate=>true  
  what=>"previous"  
 }  


    }

output {
     if [type] == "zj_api" { 
        redis {
                host => "192.168.32.67"
                data_type => "list"
                key => "zj_api:redis"
                port=>"6379"
                password => "1234567"
        }
}
      else if [type] == "wj_api"{
       redis { 
                host => "192.168.32.67" 
                data_type => "list" 
                key => "wj_api:redis" 
                port=>"6379" 
                password => "1234567" 
        } 
}
}

转载于:https://www.cnblogs.com/zhaoyangjian724/p/6199284.html