filebeat-8.6 收集日志配置样例

filebeat.yml

filebeat.inputs:

# Each - is an input. Most options can be set at the input level, so
# you can use different inputs for various configurations.
# Below are the input specific configurations.

# filestream is an input for collecting log messages from files.
- type: filestream

  # Unique ID among all inputs, an ID is required.
  id: medical-filestream-id

  # Change to true to enable this input configuration.
  enabled: true

  # Paths that should be crawled and fetched. Glob based paths.
  paths:
    - /data/medicalchain/log/medicalchain*.log
    #- c:\programdata\elasticsearch\logs\*
  ignore_older: 24h
  fields:
    log_type: "medicalchain"
    multiline.pattern: '^\s'
    multiline.negate: true
    multiline.match: after

- type: filestream
  id: wechat-filestream-id
  enabled: true
  paths:
    - /data/wechat/log/wechat-log/wechat*.log
  ignore_older: 24h
  fields:
    log_type: "wechat"
    multiline.pattern: '^\s'
    multiline.negate: true
    multiline.match: after