一、vim filebeat-6.3.2-linux-x86_64/filebeat.yml
- type: log # Change to true to enable this input configuration.
#enabled: false 改为true才生效
enabled: true # Paths that should be crawled and fetched. Glob based paths.
paths:
#- /var/log/*.log
- /home/elk/nginx/logs/error.log
#- c:\programdata\elasticsearch\logs\*
启动filebeat
/home/elk/filebeat-6.3.2-linux-x86_64/filebeat &
二、图示: