debian安装filebeat5.5收集nginx日志
# vim /etc/logstash/conf.d/nginx.conf input {beats {
port => 5044
codec => "json"
}
}
output {
if == "zixun-nginx-access" {
elasticsearch {
hosts => ["192.168.3.56:9200","192.168.3.49:9200","192.168.3.57:9200"]
index => "zixun-nginx-access-%{+YYYY.MM.dd}"
document_type => "%{[@metadata]}"
template_overwrite => true
user => elastic
password => Monkey
}}
if == "water-nginx-access" {
elasticsearch {
hosts => ["192.168.3.56:9200","192.168.3.49:9200","192.168.3.57:9200"]
index => "water-nginx-access-%{+YYYY.MM.dd}"
document_type => "%{[@metadata]}"
template_overwrite => true
user => elastic
password => Monkey
}}
if == "nav-nginx-access" {
elasticsearch {
hosts => ["192.168.3.56:9200","192.168.3.49:9200","192.168.3.57:9200"]
index => "nav-nginx-access-%{+YYYY.MM.dd}"
document_type => "%{[@metadata]}"
template_overwrite => true
user => elastic
password => Monkey
}}
if == "wood-nginx-access" {
elasticsearch {
hosts => ["192.168.3.56:9200","192.168.3.49:9200","192.168.3.57:9200"]
index => "wood-nginx-access-%{+YYYY.MM.dd}"
document_type => "%{[@metadata]}"
template_overwrite => true
user => elastic
password => Monkey
}}
if == "redir-nginx-access" {
elasticsearch {
hosts => ["192.168.3.56:9200","192.168.3.49:9200","192.168.3.57:9200"]
index => "redir-nginx-access-%{+YYYY.MM.dd}"
document_type => "%{[@metadata]}"
template_overwrite => true
user => elastic
password => Monkey
}}
if == "default-nginx-access" {
elasticsearch {
hosts => ["192.168.3.56:9200","192.168.3.49:9200","192.168.3.57:9200"]
index => "default-nginx-access-%{+YYYY.MM.dd}"
document_type => "%{[@metadata]}"
template_overwrite => true
user => elastic
password => Monkey
}}
if == "zx-opgirl-cn-nginx-access" {
elasticsearch {
hosts => ["192.168.3.56:9200","192.168.3.49:9200","192.168.3.57:9200"]
index => "zx-opgirl-cn-nginx-access-%{+YYYY.MM.dd}"
document_type => "%{[@metadata]}"
template_overwrite => true
user => elastic
password => Monkey
}}
if == "www-oupeng-nginx-access" {
elasticsearch {
hosts => ["192.168.3.56:9200","192.168.3.49:9200","192.168.3.57:9200"]
index => "www-oupeng-nginx-access-%{+YYYY.MM.dd}"
document_type => "%{[@metadata]}"
template_overwrite => true
user => elastic
password => Monkey
}}
if == "kibana-nginx-access" {
elasticsearch {
hosts => ["192.168.3.56:9200","192.168.3.49:9200","192.168.3.57:9200"]
index => "kibana-nginx-access-%{+YYYY.MM.dd}"
document_type => "%{[@metadata]}"
template_overwrite => true
user => elastic
password => Monkey
}}
}
页:
[1]