官网也：
http://www.elastic.co/downloads/beats/filebeat
1、下载rpm包
# curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-5.5.1-x86_64.rpm
2、安装
# rpm -ivh filebeat-5.5.1-x86_64.rpm
3、配置
filebeat:
prospectors:
–
paths:
– /usr/local/nginx/logs/www.sreop.com/*.log
input_type: log
document_type: nginx-access-log
–
paths:
– /usr/local/nginx/logs/error.log
input_type: log
document_type: nginx-error-log
output:
#elasticsearch:
# hosts: [“localhost:9200”]
logstash:
hosts: [“10.10.5.65:5044”]
…其他部分没有改动，不需要修改
4、启动
# service filebeat start
