背景:在 win10下docker操作filebeat做日志采集 基础上进行
一、配置文件
1. D:\usr\local\etc\filebeat目录下docker-compose-filebeat.yml文件,新增暴露端口
version: '3'
services:
filebeat:
image: elastic/filebeat:7.6.2
container_name: filebeat
volumes:
- /d/usr/local/logs/filebeat:/usr/share/filebeat/logs
- /d/usr/local/etc/filebeat/filebeat.yml:/usr/share/filebeat/filebeat.yml
- /d/usr/local/var/filebeat/data:/usr/share/filebeat/data
ports:
- 8080:8080/udp
- 9000:9000
2. D:\usr\local\etc\filebeat目录下filebeat.yml文件,新增UDP、TCP数据源
filebeat.inputs:
- type: log
enabled: true
paths:
- /usr/share/filebeat/logs/*.log
# 自定义属性
fields:
type: log
document_type: spring
- type: tcp
enabled: true
max_message_size: 10MiB
host: "0.0.0.0:90