filebeat+elasticsearch

filebeat.prospectors:

• input_type: log
  paths:
  • /var/log/*.log
    output.elasticsearch:
    hosts: ["172.16.50.43:9200"]

vi /etc/filebeat/filebeat.yml