1、7.4.0 启用模块
我们提供的服务有：成都做网站、成都网站设计、微信公众号开发、网站优化、网站认证、金东ssl等。为上千多家企事业单位解决了网站和推广的问题。提供周到的售前咨询和贴心的售后服务，是有科学管理、有技术的金东网站制作公司
./filebeat modules list ./filebeat modules enable nginx ./filebeat modules list
2、修改 modules.d/nginx.yml ，主要添加日志对应地址
[elasticsearch@es1 filebeat-7.4.0-linux-x86_64]$ cat modules.d/nginx.yml # Module: nginx # Docs: https://www.elastic.co/guide/en/beats/filebeat/7.4/filebeat-module-nginx.html - module: nginx # Access logs access: enabled: true # Set custom paths for the log files. If left empty, # Filebeat will choose the paths depending on your OS. var.paths: ["/usr/local/nginx/logs/access.log*"] # Error logs error: enabled: true # Set custom paths for the log files. If left empty, # Filebeat will choose the paths depending on your OS. var.paths: ["/usr/local/nginx/logs/error.log"]
3、配置filebeat配置文件
[elasticsearch@es1 filebeat-7.4.0-linux-x86_64]$ cat nginx-m.yml
filebeat.inputs:
#- type: log
# enabled: true
# paths:
# - /usr/local/nginx/logs/*.log
# tags: ["nginx"]
setup.template.settings:
index.number_of_shards: 2
output.elasticsearch:
# Array of hosts to connect to.
hosts: ["192.168.56.101:9200"]
filebeat.config.modules:
path: ${path.config}/modules.d/*.yml
reload.enabled: false
[elasticsearch@es1 filebeat-7.4.0-linux-x86_64]$4、启动
./filebeat -e -c nginx-m.yml
5、访问并观察数据
