标签：diff erro 日志文件 ble vim option code level local
先贴一下官方文档https://www.elastic.co/guide/en/beats/filebeat/6.6/filebeat-installation.html
我本次使用rpm的方式安装,与官方文档略有差异,记录如下:
//官方是使用curl命令:curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-6.6.1-x86_64.rpm
//但是我所用的服务器可能做了限制(报curl: (35) SSL connect error),我使用wget代替,下载到服务器上,如下
wget https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-6.6.1-x86_64.rpm
sudo rpm -vi filebeat-6.6.1-x86_64.rpm
配置input
安装成功之后,配置文件的路经在/etc/filebeat/filebeat.yml,直接使用vimfilebeat.inputs:
# Each - is an input. Most options can be set at the input level, so # you can use different inputs for various configurations. # Below are the input specific configurations. - type: log # 默认为false,需要把enabled改为true # Change to true to enable this input configuration. enabled: true # Paths that should be crawled and fetched. Glob based paths. paths:
# 日志文件所在目录 - /var/log/*.log
#- D:\data\logs\*
配置output.elasticsearch
output.elasticsearch: # Array of hosts to connect to.
# 输出至目的elasticsearch hosts: ["localhost:9200"]
重启filebeat
service filebeat restart
标签：diff erro 日志文件 ble vim option code level local
原文地址：https://www.cnblogs.com/lixyu/p/10489758.html
