elk之logstash grok

1.自定义路径

[root@lb-node01 patterns]# pwd
/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-patterns-core-4.0.2/patterns
[root@lb-node01 patterns]# ll
total 96
-rw-r--r-- 1 logstash logstash 1197 Feb 25 01:47 aws
-rw-r--r-- 1 logstash logstash 4831 Feb 25 01:47 bacula
-rw-r--r-- 1 logstash logstash 2154 Feb 25 01:47 bro
-rw-r--r-- 1 logstash logstash  879 Feb 25 01:47 exim
-rw-r--r-- 1 logstash logstash 9544 Feb 25 01:47 firewalls
-rw-r--r-- 1 logstash logstash 6199 Feb 25 01:47 grok-patterns
-rw-r--r-- 1 logstash logstash 3251 Feb 25 01:47 haproxy
-rw-r--r-- 1 logstash logstash 1357 Feb 25 01:47 java
-rw-r--r-- 1 logstash logstash 1087 Feb 25 01:47 junos
-rw-r--r-- 1 logstash logstash 1037 Feb 25 01:47 linux-syslog
-rw-r--r-- 1 logstash logstash   49 Feb 25 01:47 mcollective
-rw-r--r-- 1 logstash logstash  190 Feb 25 01:47 mcollective-patterns
-rw-r--r-- 1 logstash logstash  614 Feb 25 01:47 mongodb
-rw-r--r-- 1 logstash logstash 9597 Feb 25 01:47 nagios
-rw-r--r-- 1 logstash logstash  142 Feb 25 01:47 postgresql
-rw-r--r-- 1 logstash logstash  845 Feb 25 01:47 rails
-rw-r--r-- 1 logstash logstash  104 Feb 25 01:47 redis
-rw-r--r-- 1 logstash logstash  188 Feb 25 01:47 ruby