//雪花飘落特效 //右上角github跳转   

filebeat索引使用变量

filebeat.yml
filebeat.inputs:
filebeat.config.inputs:
  path: config/*.yml
  reload.enabled: true
   
filebeat.config.modules:
  path: ${path.config}/modules.d/*.yml
  reload.enabled: false
setup.template.settings:
  index.number_of_shards: 1
setup.kibana:
output.elasticsearch:
  username: filebeta_log
  hosts: ["http://es-cn-7mz2c6ru5000kj5ac.elasticsearch.aliyuncs.com:9200"]
  indices:
    - index: "%{[fields.servicename]}-%{+yyyy.ww}"
processors:
  - add_host_metadata:
      when.not.contains.tags: forwarded
  - add_cloud_metadata: ~
  - add_docker_metadata: ~
  - add_kubernetes_metadata: ~
  - drop_fields:
      fields: ["agent.ephemeral_id","agent.hostname","agent.id","agent.name","agent.type","agent.version","host.id","host.hostname","host.architecture","host.os.platform","host.ip","host.mac","host.os.build","host.os.family","host.os.kernel","ecs.version","log.offset","log.flags"]
      ignore_missing: false
input.yml
- type: log
  enabled: true
  paths:
    - /home/data/logs/*/info.log
    - /home/data/server/tiger/*/logger/error.log
    - /home/data/server/tiger/*/logger/warn.log
    - /home/data/server/wolf-*/logger/error.log
    - /home/data/server/wolf-*/logger/warn.log
    - /home/data/logs/*/*.log
  multiline.pattern: '^2[0-9]{3}-[0-9]{2}-[0-9]{2}'
  multiline.negate: true
  multiline.match: after
  fields:
    servicename: "nj_games"
posted @ 2021-11-30 11:20  农夫运维  阅读(580)  评论(0)    收藏  举报