Bdtjtk

add a comment | 

Your Answer

StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});

active

oldest

votes

add a comment | 

   #Filebeat Configuration

filebeat:

  # List of prospectors to fetch data.

  prospectors:

    # Each - is a prospector. Below are the prospector specific configurations

    -



      paths:

        #- /var/log/*.log

        - ${applicationLogsPath}

      document_type: application_logs



      # Mutiline can be used for log messages spanning multiple lines.

      multiline:



        # The regexp Pattern that has to be matched. The example pattern matches all lines starting with [

        pattern: ^%{TIMESTAMP_ISO8601}



        # Defines if the pattern set under pattern should be negated or not. Default is false.

        negate: true



        # Match can be set to "after" or "before". It is used to define if lines should be append to a pattern

        # that was (not) matched before or after or as long as a pattern is not matched based on negate.

        # Note: After is the equivalent to previous and before is the equivalent to to next in Logstash

        match: after



    # Additional prospector

    -

      paths:

        - ${iisLogsPath}

      document_type: iis_logs



# Configure what outputs to use when sending the data collected by the beat.

# Multiple outputs may be used.



output:



  ### Logstash as output

  elasticsearch:

    # The elasticsearch hosts

    hosts: ["${elasticsearchHost}:9200"]



    # Number of workers per Logstash host.

    #worker: 1



    # The maximum number of events to bulk into a single batch window. The

    # default is 2048.

    #bulk_max_size: 2048

   #Filebeat Configuration

filebeat:

  # List of prospectors to fetch data.

  prospectors:

    # Each - is a prospector. Below are the prospector specific configurations

    -



      paths:

        #- /var/log/*.log

        - ${applicationLogsPath}

      document_type: application_logs



      # Mutiline can be used for log messages spanning multiple lines.

      multiline:



        # The regexp Pattern that has to be matched. The example pattern matches all lines starting with [

        pattern: ^%{TIMESTAMP_ISO8601}



        # Defines if the pattern set under pattern should be negated or not. Default is false.

        negate: true



        # Match can be set to "after" or "before". It is used to define if lines should be append to a pattern

        # that was (not) matched before or after or as long as a pattern is not matched based on negate.

        # Note: After is the equivalent to previous and before is the equivalent to to next in Logstash

        match: after



    # Additional prospector

    -

      paths:

        - ${iisLogsPath}

      document_type: iis_logs



# Configure what outputs to use when sending the data collected by the beat.

# Multiple outputs may be used.



output:



  ### Logstash as output

  elasticsearch:

    # The elasticsearch hosts

    hosts: ["${elasticsearchHost}:9200"]



    # Number of workers per Logstash host.

    #worker: 1



    # The maximum number of events to bulk into a single batch window. The

    # default is 2048.

    #bulk_max_size: 2048

   #Filebeat Configuration

filebeat:

  # List of prospectors to fetch data.

  prospectors:

    # Each - is a prospector. Below are the prospector specific configurations

    -



      paths:

        #- /var/log/*.log

        - ${applicationLogsPath}

      document_type: application_logs



      # Mutiline can be used for log messages spanning multiple lines.

      multiline:



        # The regexp Pattern that has to be matched. The example pattern matches all lines starting with [

        pattern: ^%{TIMESTAMP_ISO8601}



        # Defines if the pattern set under pattern should be negated or not. Default is false.

        negate: true



        # Match can be set to "after" or "before". It is used to define if lines should be append to a pattern

        # that was (not) matched before or after or as long as a pattern is not matched based on negate.

        # Note: After is the equivalent to previous and before is the equivalent to to next in Logstash

        match: after



    # Additional prospector

    -

      paths:

        - ${iisLogsPath}

      document_type: iis_logs



# Configure what outputs to use when sending the data collected by the beat.

# Multiple outputs may be used.



output:



  ### Logstash as output

  elasticsearch:

    # The elasticsearch hosts

    hosts: ["${elasticsearchHost}:9200"]



    # Number of workers per Logstash host.

    #worker: 1



    # The maximum number of events to bulk into a single batch window. The

    # default is 2048.

    #bulk_max_size: 2048

   #Filebeat Configuration

filebeat:

  # List of prospectors to fetch data.

  prospectors:

    # Each - is a prospector. Below are the prospector specific configurations

    -



      paths:

        #- /var/log/*.log

        - ${applicationLogsPath}

      document_type: application_logs



      # Mutiline can be used for log messages spanning multiple lines.

      multiline:



        # The regexp Pattern that has to be matched. The example pattern matches all lines starting with [

        pattern: ^%{TIMESTAMP_ISO8601}



        # Defines if the pattern set under pattern should be negated or not. Default is false.

        negate: true



        # Match can be set to "after" or "before". It is used to define if lines should be append to a pattern

        # that was (not) matched before or after or as long as a pattern is not matched based on negate.

        # Note: After is the equivalent to previous and before is the equivalent to to next in Logstash

        match: after



    # Additional prospector

    -

      paths:

        - ${iisLogsPath}

      document_type: iis_logs



# Configure what outputs to use when sending the data collected by the beat.

# Multiple outputs may be used.



output:



  ### Logstash as output

  elasticsearch:

    # The elasticsearch hosts

    hosts: ["${elasticsearchHost}:9200"]



    # Number of workers per Logstash host.

    #worker: 1



    # The maximum number of events to bulk into a single batch window. The

    # default is 2048.

    #bulk_max_size: 2048

add a comment |