filebeat采集udp/tcp数据

背景：在 win10下docker操作filebeat做日志采集 基础上进行

一、配置文件

1. D:\usr\local\etc\filebeat目录下docker-compose-filebeat.yml文件，新增暴露端口

version: '3'
services:
  filebeat:
    image: elastic/filebeat:7.6.2
    container_name: filebeat
    volumes:
        - /d/usr/local/logs/filebeat:/usr/share/filebeat/logs
        - /d/usr/local/etc/filebeat/filebeat.yml:/usr/share/filebeat/filebeat.yml
        - /d/usr/local/var/filebeat/data:/usr/share/filebeat/data
    ports:
      - 8080:8080/udp
      - 9000:9000

2. D:\usr\local\etc\filebeat目录下filebeat.yml文件，新增UDP、TCP数据源

filebeat.inputs:
- type: log
  enabled: true
  paths:
    - /usr/share/filebeat/logs/*.log
  # 自定义属性
  fields:
    type: log
    document_type: spring
- type: tcp
  enabled: true
  max_message_size: 10MiB
  host: "0.0.0.0:90