1.到官网下载logstash不具体说了
2.解压进入bin文件夹
3.去config文件夹中复制logstash-sample.conf到bin文件夹下并改名为logstash.conf文件,在修改内容如下:
input {
stdin {
}
jdbc {
# 配置数据库信息
jdbc_connection_string => "jdbc:mysql://localhost:3306/test?useUnicode=true&useJDBCCompliantTimezoneShift=true&tinyInt1isBit=false&useLegacyDatetimeCode=false&serverTimezone=UTC"
jdbc_driver_class => "com.mysql.cj.jdbc.Driver"
jdbc_user => "root"
jdbc_password => "root"
jdbc_paging_enabled => "true"
jdbc_page_size => "50000"
jdbc_default_timezone => "Asia/Shanghai"
# mysql驱动所在位置建议通过Maven下载
jdbc_driver_library => "D:\ruanjian\repository\mysql\mysql-connector-java\8.0.21\mysql-connector-java-8.0.21.jar"
#sql执行语句
statement => "SELECT chatting_records_id,chatting_master_id,user_id,user_type,content,content_type,object_id,relevance_type, DATE_FORMAT(create_time,'%Y-%m-%d %H:%i:%s')create_time,DATE_FORMAT(update_time,'%Y-%m-%d %H:%i:%s')update_time,is_deleted FROM chatting_records"
# 定时字段 各字段含义(由左至右)分、时、天、月、年,全部为*默认含义为每分钟都更新
schedule => "* * * * *"
# 是否将 sql 中 column 名称转小写
lowercase_column_names => false
}
}
filter {
json {
source => "message"
remove_field => ["message"]
}
}
output {
elasticsearch {
#es的ip和端口
hosts => ["127.0.0.1:9200"]
#ES索引名称(自己定义的)
index => "chatting"
#文档类型
document_type => "_doc"
document_id => "%{chatting_records_id}"
}
stdout {
codec => json_lines
}
}
4.cmd进入bin目录
输入命令:logstash -f logstash.conf
5.打开浏览器访问 http://localhost:9600/
显示这个表示成功