logstash 监听laravel生成的日志配置

# Sample Logstash configuration for creating a simple
# Beats -> Logstash -> Elasticsearch pipeline.

###logstash输入：从/var/log/messages输入，类型为system，起始位
input {
    file {
      path => "D:***/blog/storage/logs/sql/*.log" #laravel日志地址
    }
}

filter {
   
	if [message] =~ /^\[/{ #正则以[开头的数据进行插入
        mutate {
			remove_field => ["@version","event","log"]
		}
    }else{
        drop{}
    }
}


###logstash输出：输出给elasticsearch（以IP地址指定位置）
output {
    elasticsearch {
        hosts => ["127.0.0.1:9200"]
        index => "laravel-log"
    }
    # 日志输出:
    stdout {
        codec => json_lines
    }

}

log日志是我自己生成的sql，文本内容如下

[2022-06-06 02:57:25]insert into `users` (`name`, `email`, `password`) values ('admin1', 'admin1@qq.com', '123')
----------------------------------------------------------------------------------------------------

[2022-06-06 05:51:26]select * from `users` where `users`.`id` = '1' limit 1
----------------------------------------------------------------------------------------------------