我对elk stack是个新手。根据我对使日志从filebeat到logstash再到kibana的读取的理解,下面是步骤。 服务器设置:我在不同的节点上配置了filebeat,logstash,kibana。 步骤: 1. First start logstash.
2. Then start filebeat .
3. Registry is created on filebeat path / var/lob/filebeat/registry giving offset value once logstash acknowledges that data is read, other