一、验证日志输出采集是否正常
### --- 进入Filebeat-pod查看是否正常启动
~~~ 查看Filebeat容器
[root@k8s-master01 filebeat]# kubectl get po -n public-service -owide
NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES
app-d585bb7cf-d5gpg 2/2 Running 0 7m55s 172.27.14.206 k8s-node02 <none> <none>
### --- 进入Filebeat容器
~~~ 说明容器启动正常
[root@k8s-master01 filebeat]# kubectl exec -ti app-d585bb7cf-d5gpg -n public-service -- bash
[root@app-d585bb7cf-d5gpg filebeat]# ps aux
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.2 0.9 310220 49460 ? Ssl 15:29 0:00 filebeat -e
root 14 0.3 0.0 11828 3048 pts/0 Ss 15:33 0:00 bash
root 28 0.0 0.0 51752 3456 pts/0 R+ 15:34 0:00 ps aux
二、通过Filebeat模拟写入日志,查看日志记录过程
### --- 打开kafka的日志记录
[root@k8s-master01 filebeat]# kubectl logs -f kafka-0 -n public-service
[2021-05-24 08:02:41,968] INFO [GroupCoordinator 0]: Stabilized group logstash generation 1 (__consumer_offsets-49) with 1 members (kafka.coordinator.group.GroupCoordinator)
[2021-05-24 08:02:42,020] INFO [GroupCoordinator 0]: Assignment received from leader for group logstash for generation 1. The group has 1 members, 0 of which are static. (kafka.coordinator.group.GroupCoordinator)
### --- 打开logstash
~~~ 注:状态显示已经连接上kafka
[root@k8s-master01 filebeat]# kubectl logs -f logstash-deployment-78cd865bcd-nbs58 -n public-service
[INFO ] 2021-05-24 08:02:42.539 [Ruby-0-Thread-15: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-kafka-9.1.0/lib/logstash/inputs/kafka.rb:244] ConsumerCoordinator - [Consumer clientId=logstash-0, groupId=logstash] Found no committed offset for partition test-filebeat-0
[INFO ] 2021-05-24 08:02:42.613 [Ruby-0-Thread-15: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-kafka-9.1.0/lib/logstash/inputs/kafka.rb:244] SubscriptionState - [Consumer clientId=logstash-0, groupId=logstash] Resetting offset for partition test-filebeat-0 to offset 0.
### --- 打开filebeat-app日志记录
[root@k8s-master01 filebeat]# kubectl logs -f app-d585bb7cf-rlfkw -n public-service filebeat
2021-05-24T16:11:28.891+0800 INFO [monitoring] log/log.go:145 Non-zero metrics in the last 30s {"monitoring": {"metrics": {