我的logstash配置文件如下:
input {
beats {
port => 5044
}
}
filter {
grok {
patterns_dir => ["/elk/logstash/patterns"]
match => {
"message" => "%{TOMCAT_SERVICE_LOG}"
}
}
date {
match => ["Tstamp", "yyyy-MM-dd HH:mm:ss.SSS"]
}
}
output {
if[type] == "tomcat"{
elasticsearch {
hosts => ["192.168.0.126:9200"]
index => "tomcat_error%{+YYYY.MM.dd}"
}
}
}
启动没有报错,一直无法get到tomcat_error*索引