向 logstash 转发器添加多个路径

Question

我在 logstash 转发器配置文件中添加了多个路径。但只有第一个有效。它不发送第二条路径的日志。我的配置文件。

 "network": {
 "servers": [ "x.x.x.x:5000" ],
 "ssl certificate": "./logstash-forwarder.crt",
 "ssl ca": "/etc/pki/tls/certs/logstash-forwarder.crt",
 "timeout": 15
 },
 "files": [
 {
 "paths": [ 
  "/opt/app1/application.log"
  ],
  "fields": { "type": "app1" }
},
{
    "paths":[
            "/opt/app2/application.log"
            ],
    "fields":{"type": "app2"}
}

]
}

我知道我可以在第一个路径块中将它们一起添加并且它会起作用，但我想添加两种不同的类型，我想这不能在一个路径块中完成。

Answer 1

已解决。实际上问题是我的第二个日志文件超过一天没有更新。所以，logstash-forwarder 跳过了它。

2015/08/07 04:55:14.029097 Skipping file (older than dead time of 24h0m0s):

向 logstash 转发器添加多个路径

Adding more than one path to logstash forwarder

logstash

logstash-configuration

logstash-forwarder

elastic-stack