一、log日志配置

js
filebeat.inputs:
  - type: log
    enabled: true
    paths:
      - /tmp/test.log

output.console:
  pretty: true

js
echo 123 > test.log

这是他的数据原文件目录，中断会跟局该目录下的log.json进行读取。

js
cd /var/lib/filebeat/registry/filebeat/

也可以用通配符去匹配

js

```js
filebeat.inputs:
  - type: log
    enabled: true
    paths:
      - /tmp/test.log
      - /tmp/*.txt

output.console:
  pretty: true

yml
filebeat.inputs:
- type: log
 # 是否启动当前的输⼊类型，默认值为true
 enabled: true
 # 指定数据路径
 paths:
 - /tmp/test.log
 - /tmp/*.txt
 # 给当前的输⼊类型搭上标签
 tags: ["oldboyedu-linux80","容器运维","DBA运维","SRE运维⼯程师"] 
 #  ⾃定义字段
 fields:
   school: "北京昌平区沙河镇"
   class: "linux80"
- type: log
 enabled: true
 paths:
 - /tmp/test/*/*.log
 tags: ["oldboyedu-python","云原⽣开发"]
 fields:
   name: "oldboy" 
   hobby: "linux,抖⾳" 
 # 将⾃定义字段的key-value放到顶级字段.
 # 默认值为false，会将数据放在⼀个叫"fields"字段的下⾯.
 fields_under_root: true
output.console:
 pretty: true