CentOS - Tag - Mulinux | Linux & DevOps Notes

logstash使用示例

Sun, 12 Dec 2021 10:04:22 +0800

es2csv

input {
 elasticsearch {
    hosts => "localhost:9200"
    index => "kibana_sample_data_ecommerce"
	user => "elastic"
	password => "password"
    query => '{  # query可不填写
    "query": {
      "match_all": {}
      }
    }'
  }
}
 
output {
  csv {
    fields => ["@message"]
    path => "/tmp/csv-export.csv"
  }
}

es2file

input {
 elasticsearch {
    hosts => "localhost:9200"
    index => "kibana_sample_data_ecommerce"
	user => "elastic"
	password => "password"
    query => '{  
    "query": {
      "match_all": {}
      }
    }'
  }
}
 
output {
  file {
    path => "/tmp/csv-export.txt"
	codec => line { format => "%{@message}" }
  }
}

启动命令

/app/logstash/bin/logstash -f /app/logstash/config/esTocsv.conf

CentOS补家目录方法

Fri, 11 Dec 2015 10:04:22 +0800

创建不带家目录的用户

useradd -u 508 -g group2 -M user4 #-M不创建家目录