docker pull logstash:7.17.3
output {
elasticsearch {
hosts => "es:9200"
index => "mall-%{type}-%{+YYYY.MM.dd}"
}
}
或者直接使用我的文件(记得ip换成你自己的) : https://shaun.lanzoum.com/iYxoV10uqlsh
mkdir /mydata/logstash
docker run --name logstash -p 4560:4560 -p 4561:4561 -p 4562:4562 -p 4563:4563 \
--link elasticsearch:es \
-v /mydata/logstash/logstash.conf:/usr/share/logstash/pipeline/logstash.conf \
-d logstash:7.17.3
docker exec -it logstash bash
logstash-plugin install logstash-codec-json_lines