23 lines
441 B
23 lines
441 B
input { |
|
# 来源beats |
|
beats { |
|
# 端口 |
|
port => "5044" |
|
} |
|
} |
|
# 分析、过滤插件，可以多个 |
|
filter { |
|
grok { |
|
match => { "message" => "%{COMBINEDAPACHELOG}"} |
|
} |
|
geoip { |
|
source => "clientip" |
|
} |
|
} |
|
output { |
|
# 选择elasticsearch |
|
elasticsearch { |
|
hosts => ["http://es-master:9200"] |
|
index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}" |
|
} |
|
}
|
|
|