共計(jì) 1252 個(gè)字符，預(yù)計(jì)需要花費(fèi) 4 分鐘才能閱讀完成。

1、7.4.0 啟用模塊

??./filebeat?modules?list
??./filebeat?modules??enable?nginx
??./filebeat?modules?list

2、修改?modules.d/nginx.yml，主要添加日志對(duì)應(yīng)地址

[elasticsearch@es1?filebeat-7.4.0-linux-x86_64]$?cat?modules.d/nginx.yml?
#?Module:?nginx
#?Docs:?https://www.elastic.co/guide/en/beats/filebeat/7.4/filebeat-module-nginx.html
-?module:?nginx
??#?Access?logs
??access:
????enabled:?true
????#?Set?custom?paths?for?the?log?files.?If?left?empty,
????#?Filebeat?will?choose?the?paths?depending?on?your?OS.
????var.paths:?["/usr/local/nginx/logs/access.log*"]
??#?Error?logs
??error:
????enabled:?true
????#?Set?custom?paths?for?the?log?files.?If?left?empty,
????#?Filebeat?will?choose?the?paths?depending?on?your?OS.
????var.paths:?["/usr/local/nginx/logs/error.log"]

3、配置 filebeat 配置文件

[elasticsearch@es1?filebeat-7.4.0-linux-x86_64]$?cat?nginx-m.yml?
filebeat.inputs:
#-?type:?log
#??enabled:?true
#??paths:
#?????-?/usr/local/nginx/logs/*.log
#??tags:?["nginx"]
setup.template.settings:
??index.number_of_shards:?2
output.elasticsearch:
??#?Array?of?hosts?to?connect?to.
??hosts:?["192.168.56.101:9200"]
filebeat.config.modules:
??path:?${path.config}/modules.d/*.yml
??reload.enabled:?false
[elasticsearch@es1?filebeat-7.4.0-linux-x86_64]$

4、啟動(dòng)

?./filebeat?-e?-c?nginx-m.yml

5、訪問并觀察數(shù)據(jù)

丸趣 TV 網(wǎng) – 提供最優(yōu)質(zhì)的資源集合！