如下面这样,我配置的处理规则为:
input {
file {
path => "/data/logs/entry_view_storage_api/entry_view_storage_api.juejin.im.public.access.log"
}
}
filter {
grok {
match => {"message" => "%{COMMONAPACHELOG}"}
}
mutate {
remove_field => ["message"]
}
}
output {
elasticsearch {
hosts => "192.168.0.178:9200"
index => "42entryviewstg-%{+YYYY.MM.dd}"
}
}
可是在 kibana 界面呈现的时候,path 变成了另外一个路径地址而且还不止一个: