wxin/es
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

更新 Logstash.md

Browse Source
This commit is contained in:
wxin 2025-05-04 22:47:32 +08:00
parent b911c61aba
commit 118629dc1e
1 changed files with 301 additions and 301 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
Logstash.md
View File

@ -49,7 +49,7 @@ OpenJDK 64-Bit Server VM Temurin-17.0.11+9 (build 17.0.11+9, mixed mode, sharing
### 4. 数据流向 ### 4. 数据流向
![](accents\image-202505020031.png) ![](http://182.92.143.66:40072/directlink/img/es/image-202505020031.png)
### 5. 模拟运行 ### 5. 模拟运行
@ -118,7 +118,7 @@ nice to meet you
ES插件查看索引信息 ES插件查看索引信息
![](accents\image-202505020026.png) ![](http://182.92.143.66:40072/directlink/img/es/image-202505020026.png)
**输入来自日志文件，输出到ES集群** **输入来自日志文件，输出到ES集群**
@ -145,11 +145,11 @@ output {
ES插件展示索引 ES插件展示索引
![](accents\image-202505020027.png) ![](http://182.92.143.66:40072/directlink/img/es/image-202505020027.png)
Kibana展示数据 Kibana展示数据
![](accents\image-202505020028.png) ![](http://182.92.143.66:40072/directlink/img/es/image-202505020028.png)
**输入来自日志多文件，输出到ES集群** **输入来自日志多文件，输出到ES集群**
@ -195,9 +195,9 @@ output {
ES插件展示索引 ES插件展示索引
![](accents\image-202505020029.png) ![](http://182.92.143.66:40072/directlink/img/es/image-202505020029.png)
![](accents\image-202505020030.png) ![](http://182.92.143.66:40072/directlink/img/es/image-202505020030.png)
## 三：数据过滤 ## 三：数据过滤
@ -257,11 +257,11 @@ output {
ES插件确认索引： ES插件确认索引：
![](accents\image-202505020032.png) ![](http://182.92.143.66:40072/directlink/img/es/image-202505020032.png)
Kibana查看新字段： Kibana查看新字段：
![](accents\image-202505020033.png) ![](http://182.92.143.66:40072/directlink/img/es/image-202505020033.png)
**针对nginx的访问日志，对应生成新的字段** **针对nginx的访问日志，对应生成新的字段**
@ -298,4 +298,4 @@ output {
Kibana查看新字段： Kibana查看新字段：
![](accents\image-202505020034.png) ![](http://182.92.143.66:40072/directlink/img/es/image-202505020034.png)