Cov txheej txheem:

Koj tuaj yeem kuaj xyuas seb Filebeat xa cov ntaub ntawv mus rau Elasticsearch li cas?
Koj tuaj yeem kuaj xyuas seb Filebeat xa cov ntaub ntawv mus rau Elasticsearch li cas?

Video: Koj tuaj yeem kuaj xyuas seb Filebeat xa cov ntaub ntawv mus rau Elasticsearch li cas?

Video: Koj tuaj yeem kuaj xyuas seb Filebeat xa cov ntaub ntawv mus rau Elasticsearch li cas?
Video: tos koj hauv nruab dab - nuj xeem - nkauj tawm tshiab fullMV 2021 2024, Kaum ib hlis
Anonim

Koj ua tau tshawb xyuas yog cov ntaub ntawv muaj nyob rau hauv a filebeat -YYYYY. MM. dd index ib Elasticsearch siv cov lus txib curl uas yuav luam tawm tus suav qhov xwm txheej. Thiab koj ua tau tshawb xyuas Filebeat cov ntaub ntawv rau yuam kev yog koj tsis muaj xwm txheej hauv Elasticsearch.

Hauv qhov no, kuv tuaj yeem qhia tau li cas yog Filebeat ua haujlwm?

Yuav ua li cas txheeb xyuas filebeat parsed cav cov ntaub ntawv suav

  1. Saib hauv cov ntaub ntawv sau npe (qhov chaw nyob ntawm txoj kev koj tau teeb tsa, nws yog /var/lib/filebeat/registry ntawm DEB/RPM) thiab xyuas seb qhov filebeat tau nkag mus rau hauv cov ntaub ntawv li cas.
  2. Ua kom logging verbosity hauv filebeat rau cov ntaub ntawv qib thiab xyuas seb nws sau cov ntaub ntawv.
  3. Ua kom verbosity ntawm Logstash los xyuas tias cov ntaub ntawv mus txog LS.

Tsis tas li ntawd, Filebeat ua haujlwm nrog Logstash li cas? Filebeat yog ib lub teeb shipper rau xa mus thiab centralizing cav cov ntaub ntawv. Nruab raws li tus neeg sawv cev ntawm koj cov servers, Filebeat saib xyuas cov ntaub ntawv teev tseg lossis qhov chaw uas koj teev, sau cov xwm txheej, thiab xa mus rau Elasticsearch lossis Logstash rau indexing.

Ib yam li ib tug yuav nug, Filebeat xa cov ntaub ntawv mus rau Logstash li cas?

Filebeat , raws li lub npe implies, ships log ntaub ntawv. Nyob rau hauv ELK-raws li cov raj xa dej, Filebeat plays lub luag hauj lwm ntawm tus neeg saib xyuas txiav - ntsia rau ntawm lub tshuab tsim cov ntaub ntawv cav, tailing lawv, thiab xa mus rau cov ntaub ntawv rau ib qho Logstash rau kev ua tiav ntau dua lossis ncaj qha mus rau Elasticsearch rau indexing.

Kuv yuav siv Filebeat li cas?

  1. Kauj ruam 1: Nruab Filebeat.
  2. Kauj ruam 2: Configure Filebeat.
  3. Kauj Ruam 3: Xa cov qauv ntsuas hauv Elasticsearch.
  4. Kauj ruam 4: Teeb lub Kibana dashboards.
  5. Kauj ruam 5: Pib Filebeat.
  6. Kauj ruam 6: Saib cov qauv Kibana dashboards.
  7. Pib nrawm: modules rau hom log sib txawv.
  8. Repositories rau APT thiab YUM.

Pom zoo: