admin管理员组

文章数量:1432285

一,下载filebeat

https://www.elastic.co/cn/downloads/past-releases/filebeat-6-5-1

 

二,打开windows,上传压缩包到C盘,解压压缩包

 

三,配置filebeat.yml

- type: log
  enabled: true
  encoding: utf-8
  paths:
    - c:\programdata\elasticsearch\logs\*
  fields:
    logtype: test
    group: test
    server: test10
  fields_under_root: true  
  exclude_lines: ['poll','running','Content-Length']

exclude_lines匹配字符串只能写一条,可以写多个匹配;

exclude_lines第二条匹配只能写正

本文标签: 日志WindowsFileBeat