配置文件的基本格式，输入部分，过滤器部分和输出部分。
|
1
2
3
4
5
6
7
8
9
10
11
|
# This is a comment. You should use comments to describe
# parts of your configuration.
input {
...
}
filter {
...
}
output {
...
}
|
每个部分都可以配置一个或多个插件。下面展示的是输入部分，有两个file插件。
|
1
2
3
4
5
6
7
8
9
10
|
input {
file
{
path =>
"/var/log/messages"
type
=>
"syslog"
}
file
{
path =>
"/var/log/apache/access.log"
type
=>
"apache"
}
}
|
插件的值类型
数组
|
1
2
|
path => [
"/var/log/messages"
,
"/var/log/*.log"
]
path =>
"/data/mysql/mysql.log"
|
布尔
|
1
|
ssl_enable =>
true
|
字符串
|
1
2
|
name =>
"Hello world"
name =>
'It\'s a beautiful day'
|
哈希
|
1
2
3
4
5
|
match => {
"field1"
=>
"value1"
"field2"
=>
"value2"
...
}
|
字节
|
1
2
3
4
|
my_bytes =>
"1113"
# 1113 bytes
my_bytes =>
"10MiB"
# 10485760 bytes
my_bytes =>
"100kib"
# 102400 bytes
my_bytes =>
"180 mb"
# 180000000 bytes
|
代码
|
1
|
codec =>
"json"
|
数值：浮点或整型
|
1
|
port => 33
|
密码型：不会记录到日志或打印出来
|
1
|
my_password =>
"password"
|
路径型：字符串
|
1
|
my_path =>
"/tmp/logstash"
|
注释：使用#
本文转自 genuinecx 51CTO博客，原文链接：http://blog.51cto.com/favccxx/1826747，如需转载请自行联系原作者
