![](https://img-blog.csdnimg.cn/20201014180756724.png?x-oss-process=image/resize,m_fixed,h_64,w_64)
ELK
coder-zzzz
这个作者很懒,什么都没留下…
展开
-
logstash自定义字段类型
说明基于7.17版本编写conf文件rocketmq.json# The # character at the beginning of a line indicates a comment. Use# comments to describe your configuration.input { beats { port => "5044" #logstash监听端口 }}# The filter part原创 2022-02-17 15:01:09 · 2637 阅读 · 0 评论 -
filebeat-自定义timestamp
自定义timestamp在filebeat采集日志时,会需要将日志中的具体时间用于@timestamp字段,供后续的时间查找等等,在7.16版本中可以使用timestamp processor:https://www.elastic.co/guide/en/beats/filebeat/current/processor-timestamp.html 来进行处理"2022-01-26 06:43:31.632 | log message" 1.1.1.1 - - [27/Jan/2022:17:08原创 2022-01-27 17:34:33 · 2355 阅读 · 1 评论