filebeat 日志收集

官网也：

http://www.elastic.co/downloads/beats/filebeat

1、下载rpm包

# curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-5.5.1-x86_64.rpm

2、安装

# rpm -ivh filebeat-5.5.1-x86_64.rpm

3、配置

filebeat:

   prospectors:

    –

    paths:

– /usr/local/nginx/logs/www.sreop.com/*.log

input_type: log

document_type: nginx-access-log

–

paths:

– /usr/local/nginx/logs/error.log

input_type: log

document_type: nginx-error-log

output:

#elasticsearch:

#  hosts: [“localhost:9200”]

logstash:

hosts: [“10.10.5.65:5044”]

…其他部分没有改动，不需要修改

4、启动

# service filebeat start