Skip to content

wooddeep/filebeat

Repository files navigation

编译方法

1. 安装好go的编译环境,设置好GOROOT和GOPATH,假设GOROOT为~/go

2. 添加~/go/src到GOPATH

3. 创建目录~/go/src/github.com/elastic

4. 下载beats.tar.gz到go的源码包~/go/src/github.com/elastic,解压

5. 关于入口mysql的代码在~/go/src/github.com/elastic/beats/libbeat/outputs/mysql

6. 进入filebeat的目录编译:

6.1 cd ~/go/src/github.com/elastic/beats/filebeat

6.2 make

在~/go/src/github.com/elastic/beats/filebeat文件夹生成可执行文件filebeat

配置方法

#-------------------------- msyql output ------------------------------
output.mysql:
  address: "127.0.0.1:3306"
  username: "root"
  password: "123456"
  database: "test"
  insert: INSERT INTO migu_log_lock_account VALUES (?, ?, ?, ?);
  parser: var regex=/\([\s'"]*([\d\w]+)[\s'"]*,[\s'"]*([\d\w\-_]+)[\s'"]*,[\s'"]*([\d:\-\s]*)[\s'"]*,[\s]*(\d*)[\s]*\)/; $$ = regex.exec($).slice(1,5); # line parser

1. insert值代表插入mysql的模板, 其中4个? 代表需要插入4个字段,即每行日志数据中,需求取4个字段;
2. parser值代表解析每行日志的方法, $代表每行日志数据, $$代表该行解析的结果,是一个数组,该数据的长度和 1中问号的个数相同;
3. parser值中,$和$$是固定的变量定义,不能修改,用户仅需要根据日志的实际格式,修改$$的赋值方法即可!

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Contributors 3

  •  
  •  
  •  

Languages