filebeat收集本地日志到ES

1.配置

filebeat.inputs:
- type: log
  enable: true
  paths:
    - /var/log/nginx/access.log

output.elasticsearch:
  hosts: ["10.0.0.51:9200"]

2.啟動

[root@web01 ~]# systemctl restart filebeat.service

#驗證
[root@web01 ~]# ps -ef | grep filebeat

3.測試

#訪問Nginx
http://10.0.0.7:8081/

#查看ES頁面