Vector配置

官方记录：https://github.com/vectordotdev/vector/issues/2137

目前只支持file、docker

[sources.multiline_logs]
type = "file"
include = [ "/opt/multiline.log" ]
	[sources.multiline_logs.multiline]
		start_pattern = '^<\d+>'
		mode = "halt_before"
		condition_pattern = '<\d+>'
		timeout_ms = 1000

流氓使用：将获取的信息写入file在读取

 

调试使用，每次启动vector都从头消费文件日志：

data_dir = "D:\\vector_log"
[sources.file]
type = "file"
include = ["D:\\vector_log\\xxx*log"]
ignore_checkpoints=true  # 从头消费

 

Clickhouse批量发送：

[sinks.ck]
type = "clickhouse"
inputs = ["6e05d2"]
endpoint = "http://127.0.0.1:8123"
database = "database"
compression = "gzip"
auth.strategy = "basic"
auth.user = "username"
auth.password = "pwd"
# 批量发送, 缓冲区
batch.max_bytes = 100000 # 根据实际日志文件大小调整
batch.timeout_secs = 1
buffer.type = "memory"
buffer.max_events = 500 # 缓冲区事件达到500就发送，保存在内存中
table = "PWEB"