filebeat.inputs:
- type: log
enabled: true
paths:
- /root/logs/biz-feed-error.log
multiline.pattern: '^\['
multiline.negate: true
multiline.match: after
tags: ["biz-feed-error"]
setup.kibana:
host: "https://xxx:5601"
user: "username"
password: "password"
output.elasticsearch:
hosts: ["http://xxx:9200"]
username: "username"
password: "password"
indices:
- index: "%{+yyyy.MM.dd}-biz-feed-error"
when.contains:
tags: "biz-feed-error"
setup.template.settings:
index.number_of_shards: 3
processors:
- add_host_metadata: ~
- add_cloud_metadata: ~
setup.template.name: "nginx"
setup.template.pattern: "nginx-*"
setup.template.enabled: false
setup.template.overwrite: true
