输出中的logstash if 语句

Question

这个简单的配置文件有一个错误。我已经尝试了所有我能想到的方法来修复它。我简化了这个例子。最终我想使用多个输入文件并将它们发送到输出上的不同端口。

input {
  file {
    path => "/home/user/log/*"
    type => "test1"
    start_position => "beginning"
  }
}

output {
  syslog {

    host => "server.com"

    if [type] == "test1" {
      port => 5555
    }

    severity => "informational"
    facility => "syslogd"
  }
}

错误是:

Error: Expected one of #, => at line 14, column 8 (byte 168) after output {
  syslog {

    host => "server.com"

    if

logstash 在 ubuntu 上运行:

apt --installed list|grep logstash
logstash/stable,now 1.4.3-1-7e387fb all [installed]

Answer 1

我发现了问题。我需要像这样移动“syslog”:

output {
  if [type] == "test1" {
    syslog {
      host => "server.com"
      port => 5555
      severity => "informational"
      facility => "syslogd"

    }
 }
}