vim /etc/filebeat/filebeat.yml
1 2 3 4 5 6 7 8 9 10 11 12 |
- input_type: log paths: - /var/www/site.ru/htdocs/logs/logs.log document_type: elk-json json: # message_key: datetime keys_under_root: true json.add_error_key: true json.overwrite_keys: false # fields: # app: "site.ru - json" |