采用rpm安装,直接使用systemctl启动,发现不回自动创建/var/log/filebeat目录,我手动创建后,也没有日志文件产生:
```
#=========================== Filebeat inputs =============================
filebeat.inputs:
- type: log
# Change to true to enable this input configuration.
enabled: true
paths:
- /data/log/message
tail_files: true
#================================ Outputs =====================================
#----------------------------- Logstash output --------------------------------
output.logstash:
hosts: ["127.0.0.1:5044"]
logging.level: info
logging.to_files: true
logging.files:
path: /var/log/filebeat
name: filebeat
```
```
#=========================== Filebeat inputs =============================
filebeat.inputs:
- type: log
# Change to true to enable this input configuration.
enabled: true
paths:
- /data/log/message
tail_files: true
#================================ Outputs =====================================
#----------------------------- Logstash output --------------------------------
output.logstash:
hosts: ["127.0.0.1:5044"]
logging.level: info
logging.to_files: true
logging.files:
path: /var/log/filebeat
name: filebeat
```
1 个回复
taeyeon
赞同来自:
用./filebeat -c filebeat.yml -e 前台启动filebeat 可以看到filebeat启动过程 希望能帮到你