u010533742的博客

tg-agent-bit安装[td-agent-bit]name = TD Agent Bitbaseurl = https://packages.fluentbit.io/centos/7/$basearch/gpgcheck=1gpgkey=https://packages.fluentbit.io/fluentbit.keyenabled=1yum install td-agent-bit -yvi /etc/td-agent-bit/td-agent-bit.confsudo

PUT _ingest/pipeline/docker-nginx{ "description": "Pipeline for parsing docker Nginx access logs. ", "processors": [ { "grok": { "field": "log", "patterns": [ "(%{NGINX_HOST} )?\"?(?:%{NGINX_ADDRESS_LIST:nginx.acces

1、根据条件修改的命令示例:POST test1/_update_by_query{ "query": { "term": { "phone": "12345678909" } } , "script": { "source": "ctx._source['message'] = 'xuwujing'" }}2、根据条件删除数据的命令示例：POST test/_delete_by_query{ "query": { "term

1、下载docker pull elasticsearch:6.8.52、配置elasticsearch.ymlnetwork.host: 192.168.11.191http.port: 9200bootstrap.memory_lock: falsehttp.cors.allow-origin: "*"http.cors.allow-headers: Authorizationxpack.security.enabled: truexpack.security.transport.

1、下载elastalert镜像docker pull anjia0532/elastalert-docker2、启动docker#!/bin/bashdocker run -itd --restart=always --name elastalert --network host \ -v /data/elastalert/rules:/opt/elastalert/rules \ -v /data/elastalert/elastalert_modules:/opt/elas

elastalert控制警报时间段https://github.com/0xSeb/elastalert_hour_range1、在elastalert_modules在增加hour_range_enhancement.pyimport dateutil.parserfrom elastalert.enhancements import BaseEnhancementfrom elastalert.enhancements import DropMatchExceptionclass Hou