实战

logstash配置

input { #stdin {}beats {port &＃61;> 5044}
}output {elasticsearch {hosts &＃61;> ["192.168.126.17:9200"]#index&＃61;>"linux-varlog-%{&＃43;YYYY.MM.dd}"}stdout { codec &＃61;> rubydebug }
}


filebeat配置

# filebeat.yml
filebeat.prospectors:
- input_type: logpaths:- /var/log/*.logencoding: utf-8output.logstash:hosts: ["192.168.126.17:5044"]

elasticsearch配置

# filename : config/elasticsearch.yml
node.name: t17
path.data: ./data
path.logs: ./logs
network.host: 192.168.126.17http.cors.enabled: true
http.cors.allow-origin: "*"

操作简单看