filebeat.prospectors:
- input_type: log
paths:
- /var/log/dblog/*/*.log
- /var/log/dblog/*/*.out
- /var/log/dblog/*/*/*.log
- /var/log/dblog/*/*/*.out
- /bigdata/salut/components/logstash/logs/*.log
- /var/log/messages
tail_files: true
output.logstash:
hosts: ['localhost:5044']
logging.level: info
logging.to_files: true
logging.to_syslog: false
logging.files:
path: /var/log/filebeat
name: mybeat.log
keepfiles: 2
这是我filebeat.yml的配置信息
2018-08-13T16:10:58+08:00 INFO Non-zero metrics in the last 30s: filebeat.harvester.closed=1 filebeat.harvester.open_files=-1 filebeat.harvester.running=-1 libbeat.logstash.call_count.PublishEvents=6 libbeat.logstash.publish.read_bytes=36 libbeat.logstash.publish.write_bytes=7603 libbeat.logstash.published_and_acked_events=96
这是filebeat的日志输出
不知道filebeat再那里能修改日志的输出格式
我想变成以下的格式
[2018-08-13T16:10:58+08:00] [INFO] Non-zero metrics in the last 30s: filebeat.harvester.closed=1 filebeat.harvester.open_files=-1 filebeat.harvester.running=-1 libbeat.logstash.call_count.PublishEvents=6 libbeat.logstash.publish.read_bytes=36 libbeat.logstash.publish.write_bytes=7603 libbeat.logstash.published_and_acked_events=96
- input_type: log
paths:
- /var/log/dblog/*/*.log
- /var/log/dblog/*/*.out
- /var/log/dblog/*/*/*.log
- /var/log/dblog/*/*/*.out
- /bigdata/salut/components/logstash/logs/*.log
- /var/log/messages
tail_files: true
output.logstash:
hosts: ['localhost:5044']
logging.level: info
logging.to_files: true
logging.to_syslog: false
logging.files:
path: /var/log/filebeat
name: mybeat.log
keepfiles: 2
这是我filebeat.yml的配置信息
2018-08-13T16:10:58+08:00 INFO Non-zero metrics in the last 30s: filebeat.harvester.closed=1 filebeat.harvester.open_files=-1 filebeat.harvester.running=-1 libbeat.logstash.call_count.PublishEvents=6 libbeat.logstash.publish.read_bytes=36 libbeat.logstash.publish.write_bytes=7603 libbeat.logstash.published_and_acked_events=96
这是filebeat的日志输出
不知道filebeat再那里能修改日志的输出格式
我想变成以下的格式
[2018-08-13T16:10:58+08:00] [INFO] Non-zero metrics in the last 30s: filebeat.harvester.closed=1 filebeat.harvester.open_files=-1 filebeat.harvester.running=-1 libbeat.logstash.call_count.PublishEvents=6 libbeat.logstash.publish.read_bytes=36 libbeat.logstash.publish.write_bytes=7603 libbeat.logstash.published_and_acked_events=96
5 个回复
zqc0512 - andy zhou
赞同来自:
加[]有撒意思?后台能够识别出来 就行了呢。感觉没有必要呢。
novia - 1&0
赞同来自:
匿名用户
赞同来自:
chzhty001
赞同来自:
chzhty001
赞同来自: