2013-07-07 03:21:12 +00:00
|
|
|
# logstash configuration
|
|
|
|
|
|
|
|
# Define inputs
|
|
|
|
input {
|
|
|
|
syslog {
|
|
|
|
debug => false
|
|
|
|
host => "0.0.0.0"
|
|
|
|
port => 5514
|
|
|
|
type => "linux-syslog"
|
|
|
|
}
|
2013-11-19 06:41:42 +00:00
|
|
|
file {
|
|
|
|
type => "syslog"
|
|
|
|
path => [ "/var/log/*.log", "/var/log/messages", "/var/log/syslog", "/var/log/nginx/*.log" ]
|
2013-07-07 03:21:12 +00:00
|
|
|
}
|
|
|
|
}
|
2013-11-19 06:41:42 +00:00
|
|
|
#filter {
|
|
|
|
# grok {
|
|
|
|
# type => "linux-syslog"
|
|
|
|
# pattern => "%{SYSLOGLINE}"
|
|
|
|
# }
|
|
|
|
#}
|
2013-07-07 03:21:12 +00:00
|
|
|
# Define outputs
|
|
|
|
output {
|
|
|
|
# send events to stdout for easy debugging
|
|
|
|
# stdout { debug => true debug_format => "json" }
|
|
|
|
|
|
|
|
elasticsearch {
|
|
|
|
host => "127.0.0.1"
|
|
|
|
}
|
|
|
|
}
|