在同步日志的时候想要将日志配置成按天来生成索引，但是不知道在logstash中该怎么去配置将日志导入值当天生成的索引中，求大佬解答
input {
syslog {
port => 4562
type => "mjsuo_log"
}
}
filter {
json {
source => "message"
target => "jsoncontent"
}
}
output {
if [type] == "mjsuo_log"{
elasticsearch {
hosts => "127.0.0.1:9200"
index => "mjsuo_log"
}
}
}output {
if [type] == "mjsuo_log"{
elasticsearch {
hosts => "127.0.0.1:9200"
index => "mjsuo_log_%{+YYYY.MM.dd}"
}
}
}
0 个回复