logstash.conf配置
input {
http {
# 類型,用於判斷
type => "desktop_message"
host => "68.61.113.52"
port => "9601"
# 請求頭用戶名、密碼驗證
#需要在請求頭加上參數:Authorization
#參數值Basic Base64("user:password"):Basic ZGVza3RvcF9tZXNzYWdlOmRlc2t0b3BfbWVzc2FnZQ==
user => "desktop_message"
password => "desktop_message"
}
}
filter {
if [type] == "desktop_message" {
mutate {
# 移除不需要的字段
remove_field => ["headers","host"]
}
}
}
output {
if [type] == "desktop_message" {
elasticsearch {
# es地址,多個逗號隔開
hosts => ["localhost:9200"]
# 賬號
#user => ""
# 密碼
#password => ""
# 索引
index => "desktop_message"
# id
document_id => "%{userMessageId}"
}
}
stdout {
codec => json_lines
}
}
配置加上user、password後,需要在請求頭加上參數:Authorization 參數值爲:Basic Base64("user:password"),Basic 後有空格,我的帳號密碼加密後的值爲:ZGVza3RvcF9tZXNzYWdlOmRlc2t0b3BfbWVzc2FnZQ==
在線Base64加密:http://tool.chinaz.com/Tools/Base64.aspx
postman請求示例
官網文檔:https://www.elastic.co/guide/en/logstash/current/plugins-inputs-http.html#plugins-inputs-http