Filebeat yaml配置文件

Filebeat 配置文件

filebeat.inputs:

- type: log
  enabled: true
  paths:
    - /usr/local/nginx/logs/error.log      #日志路径
  include_lines: ["ERROR", "WARN"]       #收集日记关键字
  fields:     
    filetype: log_ms           
  multiline:          #处理跨多行日志
    pattern: '^\[[0-9]{4}-[0-9]{2}-[0-9]{2}'      #头部内容正则匹配   
    negate: true
    match: after
  fields_under_root: true

# ------------------------------ Logstash Output -------------------------------
output.logstash:
  # The Logstash hosts
  hosts: ["19.88.14.9:5044"]     #logstash地址


# Configure processors to enhance or manipulate events generated by the beat.

processors:
  - add_host_metadata: ~
  - add_cloud_metadata: ~
  - add_docker_metadata: ~
  - add_kubernetes_metadata: ~