pengln
/
filebeat
forked from ansible-collection/filebeat
1
0
Fork 0
Code Issues Pull Requests Projects Releases 1 Wiki Activity

修复 filebeat 多行日志推送Grok失败的问题

This commit is contained in:
pengln 2021-12-29 18:09:04 +08:00
parent f0fefd5cad
commit 156f4012e3
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
playbooks/roles/filebeat/defaults/main.yml
View File

@ -34,6 +34,7 @@ filebeat_logs:
index_prefix: "mgr" index_prefix: "mgr"
template_name: "mgr-cp" template_name: "mgr-cp"
template_pattern: "mgr-*" template_pattern: "mgr-*"
multiline: true
sublog: cp sublog: cp
filebeat_older_dir: "/data/opt/filebeat/{{ instance_name }}" filebeat_older_dir: "/data/opt/filebeat/{{ instance_name }}"
filebeat_older_data_dir: data2 filebeat_older_data_dir: data2

7
playbooks/roles/filebeat/templates/filebeat.yml
View File

@ -10,6 +10,13 @@ filebeat.inputs:
{% if "exclude_files" in logs[log_type] -%} {% if "exclude_files" in logs[log_type] -%}
exclude_files: {{ logs[log_type]['exclude_files'] }} exclude_files: {{ logs[log_type]['exclude_files'] }}
{% endif -%} {% endif -%}
{% if logs[log_type]['multiline'] -%}
multiline.type: pattern
multiline.pattern: '^[0-9]{4}-[0-9]{2}-[0-9]{2}'
multiline.negate: true
multiline.match: after
multiline.skip_newline: true
{% endif -%}
harvester_buffer_size: 2048 harvester_buffer_size: 2048
ignore_older: {{ filebeat_older }} ignore_older: {{ filebeat_older }}
tail_files: {{ filebeat_tail_files | string | lower }} tail_files: {{ filebeat_tail_files | string | lower }}