[filebeat][1]是一個更輕量級的日志手機工具 安裝見官網 filebeat配置 ~~~ vim filebeat.yml ~~~ ~~~ filebeat: prospectors: - paths: - /var/log/*.log fields: type: syslog output: logstash: hosts: ["localhost:5043"] ~~~ logstash配置 ~~~ beats { port => "5043" } ~~~ 執行 ~~~ ./filebeat -e -c filebeat.yml -d "publish" ~~~ [1]:https://www.elastic.co/downloads/beats/filebeat