graylog之collector-sidecar安装详解及实例配置
准备环境
yum install -y https://github.com/Graylog2/collector-sidecar/releases/download/0.1.7/collector-sidecar-0.1.7-1.x86_64.rpm
graylog-collector-sidecar -service install
mkdir -p /data/graylog/collector-sidecar/{logs,cache}
修改配置文件
server_url: http://192.168.3.24:9000/api/ //ip是graylog-server的
update_interval: 10
tls_skip_verify: false
send_status: true
list_log_files:
- /var/log/nginx/----跟目录 //目标日志的目录文件，确保目录存在
node_id: 192.168.3.25 //自行定
collector_id: file:/etc/graylog/collector-sidecar/collector-id
log_path: /data/graylog/collector-sidecar/logs //sidecar的
cache_path: /data/graylog/collector-sidecar/cache //sidecar的
log_rotation_time: 86400
log_max_age: 604800
tags:
- nginx_access //自行定义的标签，待会儿graylog的web操作时tags保持一致
backends:
- name: nxlog
enabled: false
binary_path: /usr/bin/nxlog
configuration_path: /etc/graylog/collector-sidecar/generated/nxlog.conf
- name: filebeat
enabled: true
binary_path: /usr/bin/filebeat
configuration_path: /etc/graylog/collector-sidecar/generated/filebeat.yml
配置完毕后，打开graylog的后台，如果配置正确，打开web界面会自动识别主机
image.png
image.png
此处简单栗子
切换到web界面
1.点击manage configurations
image.png
2.点击create configuration,name自定义
3.点击ceate output
image.png
4.hosts::填的是graylog-server得地址
image.png
5.配置input
forward to选项选择out[ut的
path to logfile::配置路径
image.png
6.参数参考
image.png
7.设置tags：和配置文件里的tags要保持一致
8.返回collector,看status变为renning，说明配置成功
image.png
9.点击inputs 选择beats --->launch new input
image.png
image.png
10.点击search出现如下图
image.png
