ELK集群搭建大型日志系统：4.使用 Filebeat 采集日志

环境

第一步：下载并安装

下载地址：https://www.elastic.co/cn/downloads/beats/filebeat

1.下载并安装

wget https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.1.1-x86_64.rpm
rpm -ivh filebeat-7.1.1-x86_64.rpm

2.编辑配置文件

https://blog.csdn.net/wayds/article/details/82981828

https://www.cnblogs.com/Orgliny/p/5730381.html

https://blog.csdn.net/scirhh/article/details/83016456#Kafka

配置logstash消费kafka多个topic,分别生成索引：https://www.jianshu.com/p/d02e460cc4da

ELK学习笔记之配置logstash消费kafka多个topic并分别生成索引：https://www.cnblogs.com/JetpropelledSnake/p/10873582.html

Kafka input pluginedit：https://www.elastic.co/guide/en/logstash/current/plugins-inputs-kafka.html#plugins-inputs-kafka-topics_pattern