logstash部署

Logstash 部署

version: "3"
services:
  logstash:
    image: logstash:7.8.0
    container_name: logstash
    volumes:
      - ./logstash.yml:/usr/share/logstash/config/logstash.yml
      - ./conf.d/logstash.conf:/usr/share/logstash/pipeline/logstash.conf
      - /opt/dockercompose/logfile/umstransition:/umstransitionLogs
    network_mode: host # 网络模式

logstash.yml

xpack.monitoring.elasticsearch.hosts: [ "http://172.16.100.92:9200","http://172.16.100.92:9201","http://172.16.100.92:9202" ]
http.host: "0.0.0.0"

logstash.conf

# logstash.conf
input {
     file {
     	path => "/umstransitionLogs/*"
     	type => "umstransitionLogs"
     	start_position => "beginning" 
     }
} 


output {
	 if [type] == "umstransitionLogs" {
	 	elasticsearch {
            hosts => [ "http://172.16.100.92:9200"]
            index => "umstransitionlogs-93-%{+YYYY.MM.dd}"
    	}
	 }
}