vi Dockerfile
FROM docker.elastic.co/logstash/logstash:7.15.2 RUN rm -f /usr/share/logstash/pipeline/logstash.conf ADD pipeline/ /usr/share/logstash/pipeline/ ADD config/ /usr/share/logstash/config/ VOLUME [/var/log/] CMD ["-f","/usr/share/logstash/config/logstash.conf"]
在dockerfile同路径下创建pipeline、config目录,并创建配置文件
编写logstash配置文件
vi config/logstash.conf
# Sample Logstash configuration for creating a simple # Beats -> Logstash -> Elasticsearch pipeline. input



