最近需要做一下K8S的应用内日志收集，试水了一下LogStash的日志收集，下面给大家看一下如何收集多来源的日志。

<pre name="code" class="python">
input {
    file {
        type => "tms_inbound.log"
        path => "/JavaWeb/tms2.wltest.com/logs/tms_inbound.es.*.log"
        codec => json {
                charset => "UTF-8"
            }
    }
 
    file {
        type => "tms_outbound.log"
        path => "/JavaWeb/tms2.wltest.com/logs/tms_outbound.es.*.log"
        codec => json {
                charset => "UTF-8"
            }
    }
}
 
 
 
output {
    
    if [type] == "tms_inbound.log" {
       elasticsearch { hosts => "10.230.3.183:9200"
                        index =>  'tms_inbound.log-%{+YYYY.MM.dd}'
                        codec => "json" }
        }
    else{
      elasticsearch { hosts => "10.230.3.183:9200"
                        index => 'tms_outbound.log-%{+YYYY.MM.dd}'
                        codec => "json" }
        }
 
}

总结一下，也就是我们需要赔多个Input，然后再根据不同Input的Type来配置不同的导出方式。

ITPub博客

LogStash多来源日志收集配置

最新文章