[log]logstash重要參數

參考:
https://www.elastic.co/guide/en/logstash/current/plugins-inputs-file.html#plugins-inputs-file-stat_interval
http://blog.csdn.net/wjacketcn/article/details/50960843

sincedb_path: 位置點文件路徑

• Value type is string
• There is no default value for this setting.
• Path of the sincedb database file (keeps track of the current position of monitored log files) that will be written to disk. The default will write sincedb files to some path matching $HOME/.sincedb*
• NOTE: it must be a file path and not a directory path

sincedb_write_interval: 多久記錄一次位置點,默認15s

• Value type is number
• Default value is 15
• How often (in seconds) to write a since database with the current position of monitored log files.

start_position: 第一次讀文件時候,從頭讀

• Value can be any of: beginning, end
• Default value is "end"

stat_interval:多久檢測一次日誌文件變化:默認1s

• Value type is number
• Default value is 1
• How often (in seconds) we stat files to see if they have been modified. Increasing this interval will decrease the number of system calls we make, but increase the time to detect new log lines.

tags: 給messge打標籤

• Value type is array
• There is no default value for this setting.
Add any number of arbitrary tags to your event.
This can help with processing later.

來自 <http://blog.csdn.net/wjacketcn/article/details/50960843> 

type: 給日誌增加類型字段

• Value type is string
• There is no default value for this setting.
Add a type field to all events handled by this input.
發表評論
所有評論
還沒有人評論,想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章