filebeat/playbooks/roles/filebeat/defaults/main.yml

56 lines
1.7 KiB
YAML

---
# vars file for filebeat
pip_bin_path: "/data/opt/python3/bin/pip"
python_bin_dir: "/data/opt/python3/bin"
filebeat_version: 7.10.1
filebeat_oss_version: false
filebeat_download_url: "https://artifacts.elastic.co/downloads/beats/filebeat"
filebeat_work_path: "/data/opt/filebeat/{{ instance_name }}_{{ log_type }}"
filebeat_tail_files: true
filebeat_max_procs: 2
filebeat_compression_level: 5
filebeat_output_works: 1
filebeat_gid: 1801
filebeat_uid: 1801
filebeat_older: 24h
filebeat_logs:
gateway:
paths:
- "/data/log/nginx/*.log"
index_prefix: "gw-nginx"
template_name: "gw-nginx-ug10cn"
template_pattern: "gw-nginx-*"
exclude_files: '_81\.log$'
dissect_tokenizers:
- tokenizer: "/%{}/%{}/%{}/%{}_%{sublog}.log"
field_name: "log.file.path"
filebeat_older_dir: "/data/opt/filebeat/{{ instance_name }}"
filebeat_older_data_dir: data
manager:
paths:
- "/data/game/htdocs/center/manager/storage/cp/logs/*.log"
index_prefix: "mgr"
template_name: "mgr-cp"
template_pattern: "mgr-*"
multiline: true
sublog: cp
filebeat_older_dir: "/data/opt/filebeat/{{ instance_name }}"
filebeat_older_data_dir: data2
quick:
paths:
- "/data/game/sync/quick/filebeat/*.txt"
index_prefix: "quick"
template_name: "quick"
template_pattern: "quick-*"
sublog: quick
dissect_tokenizers:
- tokenizer: "/%{}/%{}/%{}/%{}/%{}/%{zone_id}_%{server_id}_%{log_file_time}.txt"
field_name: "log.file.path"
convert_timestamp:
field_name: log_datetime
layouts:
- '2006-01-02 15:04:05'
filebeat_older_dir: "/data/opt/filebeat/quick"
filebeat_older_data_dir: data