elk监控tomcat日志

分类: 文章 • 2024-06-29 18:50:46

1. 配置conf文件

[[email protected] logstash]# cat tomcat.conf
input {
file {
path => ["/opt/tomcat/logs/localhost_access_log.*.txt"]
start_position => "beginning"
}
}

filter {
date {
match => [ "timestamp" , "YYYY-MM-dd HH:mm:ss" ]
}
}

output {
elasticsearch {
hosts => ["10.10.10.11:9200"]
}
stdout {
codec => rubydebug
}
}