第一种方法:
vim /etc/filebeat/filebeat.yml
filebeat.inputs:
# Each - is an input. Most options can be set at the input level, so
# you can use different inputs for various configurations.
# Below are the input specific configurations.
- type: log
# Change to true to enable this input configuration.
enabled: true
harvester_limit: 100
#close_eof : true
close_inactive : 10m
#close_timeout : true
ignore_older : 72h
clean_inactive : 73h
scan_frequency: 10s
# Paths that should be crawled and fetched. Glob based paths.
json.keys_under_root: true
paths:
- /etc/logs/*.log
- /var/www/logs/*.logs
vim /etc/filebeat/filebeat.yml
fi