elk收集nginx日志-蒲公英云

elk收集nginx日志

心已赠人 2023-10-18 11:58 153阅读 0赞

一：客户端logstash.conf配置文件

input {
   file {
       path => "/usr/local/nginx/logs/access.log"
       type => "nginxlog"
       start_position => "beginning"
     # sincedb_path => "/home/logstash/sincdb.nginxlog"
       }
}
filter{
    if [type]=="nginxlog" {
     grok {
       match => ["message", "%{COMMONAPACHELOG}"]
       }
     date {
       match => ["timestamp","dd/MMM/yyyy:HH:mm:ss Z"]
    }
 }
}
output {
    stdout { codec => rubydebug }
    elasticsearch { hosts => "elk.test.com:9200" }
}

########################################################下面是kibana上面显示的日志内容
“request” => “/“,
“auth” => “-“,
“ident” => “-“,
“verb” => “GET”,
“message” => “192.168.216.1 - - [22/Nov/2017:16:28:41 +0800] \“GET / HTTP/1.1\“ 499 0 \“-\“ \“Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0\“”,
“type” => “nginxlog”,
“path” => “/usr/local/nginx/logs/access.log”,
“@timestamp” => 2017-11-22T08:28:41.000Z,
“response” => “499”,
“bytes” => “0”,
“clientip” => “192.168.216.1”,
“@version” => “1”,
“host” => “nginx.test.com”,
“httpversion” => “1.1”,
“timestamp” => “22/Nov/2017:16:28:41 +0800”

二添加图像
1查看ip访问次数

elk收集nginx日志