filebeat_8.2输出kafka_2.6.0集群

1、官网下载filebeat-8.2
https://www.elastic.co/cn/downloads/beats/
2、配置
vim /usr/local/filebeat/filebeat.yml

# filestream is an input for collecting log messages from files.

- type: log
  enabled: true
  paths:
    - /var/log/command.log
  encoding: utf-8
  fields:
    app: kibana
    type: user.audit
  fields_under_root: true


# -------------------------------- Kafka Output --------------------------------
output.kafka:
  hosts: ["kafka1:9092","kafka2:9092","kafka3:9092"]#这里填写kafka集群
  topic: kibana #kafka主题
  required_acks: 1
  compression: gzip
  max_message_bytes: 100000000
  partition.hash:
    reachable_only: true

# ================================= Processors =================================
processors:
  - add_host_metadata:
      when.not.contains.tags: forwarded
  - add_cloud_metadata: ~
  - add_docker_metadata: ~
  - add_kubernetes_metadata: ~

  - drop_fields:
      fields: ["host","input","log","agent","ecs"]#填写需要删除的日志fileds

3、配置启动服务
vim /usr/lib/systemd/system/filebeat.service

[Unit]
Description=filebeat
[Service]
ExecStart=/usr/local/filebeat/filebeat -e -c /usr/local/filebeat/filebeat.yml
ExecReload=/bin/kill -HUP $MAINPID
KillMode=process
Restart=on-failure
[Install]
WantedBy=multi-user.target

重新加载服务

systemctl daemon-reload

启动filebeat

systemctl start filebeat
  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值