zoukankan      html  css  js  c++  java
  • logstash 配置文件备份

    input{
            kafka {
                    bootstrap_servers => "127.0.0.1:9092"
                    client_id => "nginxaccesslog"
                    auto_offset_reset => "latest"
                    consumer_threads => 5
                    decorate_events => true
                    topics => ["nginx_access_log"]
                    codec => "json"
                    type => "nginx_log"
            }
            kafka {
                    bootstrap_servers => "127.0.0.1:9092"
                    client_id => "database"
                    auto_offset_reset => "latest"
                    consumer_threads => 5
                    decorate_events => true
                    topics => ["dsideal_db"]
                    codec => "json"
                    type => "dsideal_db"
            }
            kafka {
                    bootstrap_servers => "127.0.0.1:9092"
                    client_id => "devops_real"
                    auto_offset_reset => "latest"
                    consumer_threads => 5
                    decorate_events => true
                    topics => ["devopsrealinfo"]
                    codec => "json"
                    type => "devopsrealinfo"
            }
            kafka {
                    bootstrap_servers => "127.0.0.1:9092"
                    client_id => "devops_base"
                    auto_offset_reset => "latest"
                    consumer_threads => 5
                    decorate_events => true
                    topics => ["devopsbaseinfo"]
                    codec => "json"
                    type => "devopsbaseinfo"
            }
    }
    filter{
            mutate {
                    gsub => ["message", "\x22", '"']
                    gsub => ["message", "\x09", '']
        }
        json {
            source => "message"
            remove_field=>["message","beat","@version","@timestamp"]
        }
            if [type] == "nginx_log" {
                    ruby {
                            code => '
                                    file = File.open("/usr/local/logstash/config/white.txt", "r")
                                    text = file.read
                                    file.close
    
                                    if !text.include?(event.get("request_uri")) then
                                            event.set("es_flag","0")
                                    else
                                            event.set("es_flag","1")
                                    end
    
                            '
                    }
            }
    
    }
    
    output {
            if [type] == "nginx_log" {
                    if [es_flag] =="1" {
                            elasticsearch {
                                    hosts => "127.0.0.1:9200"
                                    index => "nginx-access-log"
                            }
                    }
                    else {
                            elasticsearch {
                                    hosts => "127.0.0.1:9200"
                                    index => "nginx-access-log-other"
                            }
                    }
            }
            if [type] == "dsideal_db" {
                    elasticsearch {
                            hosts => "127.0.0.1:9200"
                            index => "%{table_name}"
                            document_id => "%{id}"
                    }
            }
            if [type] == "devopsbaseinfo" {
                    elasticsearch {
                            hosts => "127.0.0.1:9200"
                            index => "devopsbaseinfo"
                            document_id => "%{id}"
                    }
            }
            if [type] == "devopsrealinfo" {
                    elasticsearch {
                            hosts => "127.0.0.1:9200"
                            index => "devopsrealinfo"
                    }
            }
    }
  • 相关阅读:
    html基本标签练习
    实践1-qq邮箱主页
    html加强
    Date日期操作
    日期类的加减及java中所以日期类的操作算法大全
    讲解java异常
    关于Java并发编程的总结和思考
    删除map、list集合元素总结
    Jedis使用总结【pipeline】【分布式的id生成器】【分布式锁【watch】【multi】】【redis分布式】
    Java中的时间日期处理
  • 原文地址:https://www.cnblogs.com/kgdxpr/p/12107919.html
Copyright © 2011-2022 走看看