Client主機 - Filebeat 安裝 & 設定

安裝 Filebeat
指令：yum install https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.9.2-x86_64.rpm



filebeat.inputs:

- type: log

enabled: true

paths:
- /var/log/messages
- /var/log/*.log
- /var/log/secure
- /root/.bash_history

filebeat.config.modules:

path: ${path.config}/modules.d/*.yml
reload.enabled: false

setup.template.settings:
index.number_of_shards: 1

setup.kibana:
host: "https://192.168.120.121:5601"

output.logstash:
hosts: ["192.168.120.121:5044"]

processors:
- add_host_metadata:
when.not.contains.tags: forwarded
- add_cloud_metadata: ~
- add_docker_metadata: ~
- add_kubernetes_metadata: ~


開機即啟用服務，現在即啟用服務
systemctl enable filebeat
systemctl start filebeat