logstash收集java程序日志

一 logstash配置文件

[root@DNS-Server ~]# cat /etc/logstash/conf.d/java.conf
input {
    file {
      path => "/var/log/logstash/logstash-plain.log"
      type => "java-log"
      codec => multiline {
      pattern => "^\[(\d{4}-\d{2}-\d{2})"         #正則匹配行開始
      negate => true
      what => "previous"                          #行首結束
      }
}
}
output {
  elasticsearch {
    hosts => ["192.168.10.10:9200"]
    index => "javalog-xuan-%{+YYYY.MM}"
  }
}

二 驗證