在Debian上部署Filebeat的流程如下:
安裝Filebeat:
sudo apt-get update
sudo apt-get install filebeat
wget -qO - https://artifacts.elastic.co/GPG-KEY-filebeat | sudo apt-key add -
echo "deb https://artifacts.elastic.co/packages/7.x/apt stable main" | sudo tee -a /etc/apt/sources.list.d/filebeat.list
sudo apt-get update
sudo apt-get install filebeat
配置Filebeat:
filebeat.yml,通常位于/etc/filebeat/filebeat.yml。filebeat.inputs:
- type: log
enabled: true
paths:
- /var/log/*.log
output.elasticsearch:
hosts:
- "localhost:9200"
啟動和啟用Filebeat服務:
sudo systemctl start filebeat
sudo systemctl enable filebeat
驗證安裝:
sudo systemctl status filebeat
sudo tail -f /var/log/filebeat/filebeat.log
可選配置: