elasticsearch - 将logstash配置文件所需的文件放在我的ec2实例上的什么位置？

Question

我的logstash配置文件如下所示:

input {
    file {
        path => "/home/ec2-user/apache_logs"
        start_position => "beginning"
    }
}

filter {
  grok {
    match => {
      "message" => '%{COMMONAPACHELOG} %{QS}%{QS}'
    }
  }

  date {
    match => [ "timestamp", "dd/MMM/YYYY:HH:mm:ss Z" ]
    locale => en
  }

  geoip {
      source => "clientip"
    }

  useragent {
    source => "agent"
    target => "useragent"
  }
}
.....

现在我输入的路径给出了一个错误:

This setting must be a path .. File does not exist or cannot be opened

我应该将apache_logs文件放在哪里？

Answer 1

您只需要说出目录中要监视的文件即可。
可以通过如下修改file输入来完成:

input {
    file {
        path => "/home/ec2-user/apache_logs/*.*"
        start_position => "beginning"
    }
}

这将跟随 /home/ec2-user/apache_logs/中的所有文件