查看“Filebeat nginx log”的源代码

[[category:ops]]

=ins and config=
==Download and install Filebeat==
<pre>


curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.12.0-amd64.deb
sudo dpkg -i filebeat-7.12.0-amd64.deb
</pre>
==Edit the configuration ==
<pre>
Modify /etc/filebeat/filebeat.yml to set the connection information:

output.elasticsearch:
  hosts: ["<es_url>"]
  username: "elastic"
  password: "<password>"
setup.kibana:
  host: "<kibana_url>"

Where <password> is the password of the elastic user, <es_url> is the URL of Elasticsearch, and <kibana_url> is the URL of Kibana.

</pre>

==Enable and configure the nginx module ==

<pre>
sudo filebeat modules enable nginx

Modify the settings in the /etc/filebeat/modules.d/nginx.yml file.

</pre>

== Start Filebeat==

<pre>
The setup command loads the Kibana dashboards. If the dashboards are already set up, omit this command.

sudo filebeat setup
sudo service filebeat start
</pre>

== Module status==
<pre>
Module status  右边的 check data 按键  -- > Nginx logs dashboard

</pre>
systemctl daemon-reload

=see also=



https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-nginx.html


[https://www.cnblogs.com/kuku0223/p/8317965.html ELK--filebeat nginx模块]

[https://www.cnblogs.com/sky-cheng/p/11187534.html  filebeat收集nginx的json格式日志 ]

[https://blog.51cto.com/michaelkang/2317953 filebeat 6.4.3 采集 nginx日志]