ktianc的博客

#=========================== Filebeat inputs =============================//读取单个日志文件filebeat.inputs:- type: log enabled: True paths: - /usr/local/nginx/logs/access.log//读取整个目录filebeat.i...

filter转载：https://www.cnblogs.com/dyh004/p/9699813.htmloutput//输出到控制台output { stdout { codec => rubydebug }}//输出到elasticsearchelasticsearch { hosts => ["http://localhost:920...

filebeat安装：安装# rpm -ivhfilebeat-7.4.2-x86_64.rpm添加开机启动# systemctl enable filebeat配置# vim /etc/filebeat/filebeat.yml24 enabled: True28 - /var/log/alllog.log150 hosts: ["192.168....

部署elasticsearch报错：elasticsearch: OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release.elasticsearch: ERROR: [1...

介绍ELK是三款开源软件的缩写，即：ElasticSearch + Logstash + Kibana。这三个工具组合形成了一套实用、易用的监控架构，可抓取系统日志、apache日志、nginx日志、mysql日志等多种日志类型，目前很多公司用它来搭建可视化的集中式日志分析平台。ElasticSearch：是一个分布式的RESTful风格的搜索和数据分析引擎，同时还提供了集中存储功能，它...