huazhi 发表于 2017-12-27 18:34:01

logstash 抓取IIS日志文件写入Elasticsearch

input {  file {
  type => "iis_log_monitor"
  path => ["D:/工作文档/iislog/monitor*/W3SVC4/*.log"]
  start_position => "beginning"
  sincedb_path => "../config-demo/log/iis_log_monitor.log"
  sincedb_write_interval => 5
  discover_interval => 2
}  file {
  type => "iis_log_weixin"
  path => ["D:/工作文档/iislog/weixin*/W3SVC18/*.log"]
  start_position => "beginning"
  sincedb_path => "../config-demo/log/iis_log_weixin.log"
  sincedb_write_interval => 5
  discover_interval => 2
  }
  file {
  type => "iis_log_imagedas"
  path => ["D:/工作文档/iislog/imagedas/*.log"]
  start_position => "beginning"
  sincedb_path => "../config-demo/log/iis_log_imagedas.log"
  sincedb_write_interval => 5
  discover_interval => 2
  }
  
}
页: [1]
查看完整版本: logstash 抓取IIS日志文件写入Elasticsearch