filebeat.yml配置

filebeat.inputs:
- type: log
  enabled: true
  paths:
    - /root/dw_cloud_ai_agent/log/dw_ai.log
    - /root/dw_body_part_webservice/log/dw_body_part_webservice.log
    - /root/aiclassifier/log/nohup_*
    - /root/lung/log/nohup_*
  fields:
    type: "dw_cloud_slave"
  multiline.pattern: '^d+.*$'
  multiline.negate: true
  multiline.match: after
  multiline.timeout: 5s
- type: log
  enabled: true
  paths:
    - /root/dw_weixin/log/dw_weixin_service.log
  fields:
    type: "dw_cloud_weixin"
  multiline.pattern: '^d+.*$'
  multiline.negate: true
  multiline.match: after
  multiline.timeout: 5s
- type: log
  enabled: true
  paths:
    - /root/dw_cloud_ris_web/log/dw_cloud_ris_web.log
    - /root/dw_cloud_ris/log/dw_cloud_ris_service.log
    - /root/dw_cloud_qa/log/dw_cloud_qa.log
    - /root/dw_cloud_workstation/log/dw_cloud_workstation.log
  fields:
    type: "dw_cloud_ris"
  multiline.pattern: '^d+.*$'
  multiline.negate: true
  multiline.match: after
  multiline.timeout: 5s
- type: log
  enabled: true
  paths:
    - /root/dw_cloud_dfs_job/log/dw_cloud_dfs_job.log
    - /root/dw_cloud_dfs_web/log/dw_cloud_dfs_web.log
  fields:
    type: "dw_cloud_dfs"
  multiline.pattern: '^d+.*$'
  multiline.negate: true
  multiline.match: after
  multiline.timeout: 5s
- type: log
  enabled: true
  paths:
    - /root/dw_cloud_admin_service/log/dw_cloud_admin_service.log
    - /root/dw_cloud_admin_service/log/dw_cloud_admin_service.log
  fields:
    type: "dw_cloud_admin"
  multiline.pattern: '^d+.*$'
  multiline.negate: true
  multiline.match: after
  multiline.timeout: 5s
- type: log
  enabled: true
  paths:
    - /root/dw_cloud_scheduler/log/dw_cloud_scheduler.log
  fields:
    type: "dw_cloud_scheduler"
  multiline.pattern: '^d+.*$'
  multiline.negate: true
  multiline.match: after
  multiline.timeout: 5s
- type: log
  enabled: true
  paths:
    - /root/dw_cloud_sso/log/dw_cloud_sso_service.log
  fields:
    type: "dw_cloud_sso"
  multiline.pattern: '^d+.*$'
  multiline.negate: true
  multiline.match: after
  multiline.timeout: 5s
- type: log
  enabled: true
  paths:
    - /root/dw_statistics_service/log/dw_statistics_service.log
  fields:
    type: "dw_cloud_statistics"
  multiline.pattern: '^d+.*$'
  multiline.negate: true
  multiline.match: after
  multiline.timeout: 5s
  #json.keys_under_root: true
  #json.add_error_key: true
  #json.overwrite_keys: true
filebeat.config.modules:
  # Glob pattern for configuration loading
  path: ${path.config}/modules.d/*.yml
  # Set to true to enable config reloading
  reload.enabled: false
  # Period on which files under path should be checked for changes
  #reload.period: 10s
#==================== Elasticsearch template setting ==========================
#setup.template.settings:
#  index.number_of_shards: 1
#  #index.codec: best_compression
#  #_source.enabled: false
#output.logstash:
#  hosts: ["172.16.50.231:5044"]
#  enabled: true
#  worker: 1
#  index: "dw_ris_web"
output.elasticsearch:
  hosts: ["172.16.41.31:9092"]
  indices:
    - index: "dw_cloud_ris-%{+yyyy.MM.dd}"
      when.equals:
        fields.type: "dw_cloud_ris"
    - index: "dw_cloud_dfs-%{+yyyy.MM.dd}"
      when.equals:
        fields.type: "dw_cloud_dfs"
    - index: "dw_cloud_admin-%{+yyyy.MM.dd}"
      when.equals:
        fields.type: "dw_cloud_admin"
    - index: "dw_cloud_scheduler-%{+yyyy.MM.dd}"
      when.equals:
        fields.type: "dw_cloud_scheduler"
    - index: "dw_cloud_sso-%{+yyyy.MM.dd}"
      when.equals:
        fields.type: "dw_cloud_sso"
    - index: "dw_cloud_statistics-%{+yyyy.MM.dd}"
      when.equals:
        fields.type: "dw_cloud_statistics"
    - index: "dw_cloud_slave-%{+yyyy.MM.dd}"
      when.equals:
        fields.type: "dw_cloud_slave"
    - index: "dw_cloud_wexin-%{+yyyy.MM.dd}"
      when.equals:
        fields.type: "dw_cloud_weixin"
#setup.template.name: "dw_cloud_ris"
#setup.template.pattern: "dw_cloud_ris-*"
setup.ilm.enabled: false
#setup.ilm.rollover_alias: "dw_cloud_ris"
#setup.ilm.overwrite: true