配置输入

filebeat.inputs:
# 输入类型：[log, stdin, redis, udp, docker, tcp, syslog, netflow]
- type: log
  # Change to true to enable this input configuration.
  enabled: true
  # Paths that should be crawled and fetched. Glob based paths.
  paths:
    - /var/logs/*.log

动态加载外部配置文件

动态配置

#============================= Filebeat modules ===============================

filebeat.config:
  modules:
    path: ${path.config}/modules.d/*.yml
    reload.enabled: false
    #reload.period: 10s
  
  # 动态加载外部输入配置文件
  inputs:
    enabled: true
    path: ${path.config}/inputs.d/*.yml
    reload.enabled: true
    reload.period: 10s

启动

1 2	$ cd /opt/filebeat/ $ nohup ./filebeat -e -c filebeat.yml &