logstash

/etc/logstash/conf.d/logstash.conf

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33

input {
  redis {
    id => "system-log"
    data_type=>"list"
    host=>"127.0.0.1"
    port=>"6379"
    key=>"system-log"
  }
  redis {
    id => "app-log"
    data_type=>"list"
    host=>"127.0.0.1"
    port=>"6379"
    key=>"app-log"
  }
}

output {
  if "app-log" in [tags] {
    elasticsearch {
      id => "elk-es-app"
      hosts => "127.0.0.1:9200"
      index => "logstash-app-log-%{+YYYY.MM.dd}"
    }
  }else{
    elasticsearch {
       id => "elk-es-sys"
       hosts => "127.0.0.1:9200"
       index => "logstash-sys-log-%{+YYYY.MM.dd}"
    }
  }
}