你的浏览器禁用了JavaScript, 请开启后刷新浏览器获得更好的体验!
输入关键字进行搜索
搜索:
没有找到相关结果
luohuanfeng
赞同来自:
zhuw0312 - 一介煮夫。
medcl - 今晚打老虎。
要回复问题请先登录或注册
一介煮夫。
4 个回复
luohuanfeng
赞同来自:
检查一下是不是所有的logstash服务器配置文件中都加了"xpack.monitoring.elasticsearch.url:" 这个配置...
zhuw0312 - 一介煮夫。
赞同来自:
每台机器都是这样的配置。
medcl - 今晚打老虎。
赞同来自:
zhuw0312 - 一介煮夫。
赞同来自:
file {
type => "supply-admin-error"
path => "/home/jcy/supply_chain/supply-chain-admin/logs/common-error.log"
start_position => "beginning"
codec => multiline {
pattern => "^[0-9]{4}-[0-9]{2}-[0-9]{2}"
negate => true
what => "previous"
}
}
file {
type => "supply-admin-default"
path => "/home/jcy/supply_chain/supply-chain-admin/logs/common-default.log"
start_position => "beginning"
codec => multiline {
pattern => "^[0-9]{4}-[0-9]{2}-[0-9]{2}"
negate => true
what => "previous"
}
}
file {
type => "supply-task-default"
path => "/home/jcy/supply_chain/supply-task/logs/common-default.log"
start_position => "beginning"
codec => multiline {
pattern => "^[0-9]{4}-[0-9]{2}-[0-9]{2}"
negate => true
what => "previous"
}
}
file {
type => "supply-task-error"
path => "/home/jcy/supply_chain/supply-task/logs/common-error.log"
start_position => "beginning"
codec => multiline {
pattern => "^[0-9]{4}-[0-9]{2}-[0-9]{2}"
negate => true
what => "previous"
}
}
}
filter {
date {
match => ["message","UNIX_MS"]
target => "@timestamp"
}
ruby {
code => "event.set('timestamp', event.get('@timestamp').time.localtime + 8*60*60)"
}
ruby {
code => "event.set('@timestamp',event.get('timestamp'))"
}
mutate {
remove_field => ["timestamp"]
}
}
output {
if [type] == "supply-admin-error" {
elasticsearch {
hosts => "172.21.120.50:9200"
index => "supply-admin-error-%{+yyyy.MM.dd}"
}
}
if [type] == "supply-admin-default" {
elasticsearch {
hosts => "172.21.120.50:9200"
index => "supply-admin-default-%{+yyyy.MM.dd}"
}
}
if [type] == "supply-task-default" {
elasticsearch {
hosts => "172.21.120.50:9200"
index => "supply-task-default-%{+yyyy.MM.dd}"
}
}
if [type] == "supply-task-error" {
elasticsearch {
hosts => "172.21.120.50:9200"
index => "supply-task-error-%{+yyyy.MM.dd}"
}
}
}