[filebeat][1]是一个更轻量级的日志手机工具 安装见官网 filebeat配置 ~~~ vim filebeat.yml ~~~ ~~~ filebeat: prospectors: - paths: - /var/log/*.log fields: type: syslog output: logstash: hosts: ["localhost:5043"] ~~~ logstash配置 ~~~ beats { port => "5043" } ~~~ 执行 ~~~ ./filebeat -e -c filebeat.yml -d "publish" ~~~ [1]:https://www.elastic.co/downloads/beats/filebeat