收集多个容器日志

收集docker容器日志

1.生成多个容器

systemctl stop nginx 
docker stop $(docker ps -q)
docker rm $(docker ps -aq)
docker commit nginx nginx:v2
docker run --name nginx -p 80:80 -d nginx
docker run --name mysql -p 8080:80 -d nginx:v2
docker images
docker ps 
docker logs -f nginx
docker logs -f mysql

2.修改filebeat配置文件

filebeat.inputs:
- type: docker
  containers.ids: 
    - '*'
filebeat.config.modules:
  path: ${path.config}/modules.d/*.yml
  reload.enabled: false 
setup.kibana:
  host: "10.0.0.51:5601"
output.elasticsearch:
  hosts: ["10.0.0.51:9200"]
  index: "docker-nginx-%{[beat.version]}-%{+yyyy.MM}"
setup.template.name: "docker"
setup.template.pattern: "docker-*"
setup.template.enabled: false
setup.template.overwrite: true

3.重启filebeat

systemctl restart filebeat