OpenSearch Logstash - host 설정

---

OpenSearch Logstash - host 설정

 

 

 

 

 

OpenJDK 1.8 설치

yum install java-1.8.0-openjdk
yum install java-1.8.0-openjdk-devel

 

 

Logstash 설치

rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch$
cat > /etc/yum.repos.d/logstash.repo
  [logstash-7.x]
  name=Elastic repository for 7.x packages
  baseurl=https://artifacts.elastic.co/packages/7.x/yum
  gpgcheck=1
  gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
  enabled=1
  autorefresh=1
  type=rpm-md
yum install logstash

 

 

path.config 경로 설정

# cat /etc/logstash/pipeline.yml 
- pipeline.id: main
  path.config: "/etc/logstash/conf.d/*.conf"

 

 

파이프라인 예시 (S3)

input { 
  file { 
    type => nginx_access
    path => ["/var/log/nginx/access.log"] 
  } 
} 

filter {
    date {
        match => [ "logdate", "MMM dd yyyy  HH:mm:ss" ]
    }
}

output {
  s3 { 
        region => "us-east-2"
        bucket => "chandler"
        prefix => "nginx-log/%{+YYYY.MM.dd.HH.mm}"
        size_file => 5242880
        time_file => 1
        rotation_strategy => "size_and_time"
        encoding => "gzip"
  }
}

 

 

실행

bin/logstash -f /etc/logstash/conf.d/test.config

 

 

 

---

by mkdir-chandler

---