Skip to content

D
docker-elk
Commit 706ca087 authored by 段孔乐's avatar 段孔乐
Browse files
Options

Merge branch 'dev' into 'main'

Dev See merge request !9
parents e5312081 03147970
Hide whitespace changes
Inline Side-by-side
Showing with 55 additions and 30 deletions
.gitignore
View file @ 706ca087
......@@ -3,4 +3,6 @@ kibana.log
logstash-restart.sh
logstash.log
./idea/
\ No newline at end of file
.idea
.vscode
.github
\ No newline at end of file
init-kibana.sh
View file @ 706ca087
......@@ -42,7 +42,7 @@ function addIndexTemplate() {
}
function uploadConfig() {
resp=$(curl -s -XPOST "$kibana_host/api/saved_objects/_import?overwrite=true" --form "file=@kibana/export.ndjson" --header 'kbn-xsrf: true')
resp=$(curl -s -XPOST "$kibana_host/api/saved_objects/_import?overwrite=true" --form "file=@kibana/config.ndjson" --header 'kbn-xsrf: true')
echo "$resp"
if contain "$resp" 'success'; then
green "config upload succeed"
......@@ -51,6 +51,16 @@ function uploadConfig() {
fi
}
function uploadIndexPattern() {
resp=$(curl -s -XPOST "$kibana_host/api/saved_objects/_import?overwrite=true" --form "file=@kibana/index-patterns.ndjson" --header 'kbn-xsrf: true')
echo "$resp"
if contain "$resp" 'success'; then
green "index-patterns upload succeed"
else
red "index-patterns upload failed"
fi
}
function notHealth() {
resp=$(curl -sIL -m 5 -w "%{http_code}" -o /dev/null -XGET "$kibana_host/api/features" --header 'kbn-xsrf: true')
if [ "$resp" == 200 ]; then
......@@ -87,6 +97,7 @@ green "======================================="
addILMPolicy
addIndexTemplate
uploadConfig
# uploadIndexPattern
green ""
green "========================="
green "Initialization completed."
......
kibana/config.ndjson 0 → 100644
View file @ 706ca087
{"attributes":{"buildNum":39309,"dateFormat":"YYYY-MM-DD HH:mm:ss.SSS","dateFormat:dow":"Monday","dateFormat:tz":"Asia/Shanghai","dateNanosFormat":"YYYY-MM-DD HH:mm:ss.SSSSSSSSS","defaultColumns":["message"],"defaultIndex":"71f46820-ef7f-11eb-bdce-75a994460910"},"coreMigrationVersion":"7.12.0","id":"7.12.0","migrationVersion":{"config":"7.12.0"},"references":[],"sort":[1627464338326,708],"type":"config","updated_at":"2021-07-28T09:25:38.326Z","version":"WzExNTM5MCwyMF0="}
{"exportedCount":1,"missingRefCount":0,"missingReferences":[]}
\ No newline at end of file
kibana/export.ndjson deleted 100644 → 0
View file @ e5312081
{"attributes":{"buildNum":39309,"dateFormat":"YYYY-MM-DD HH:mm:ss.SSS","dateFormat:dow":"Monday","dateFormat:tz":"Asia/Shanghai","dateNanosFormat":"YYYY-MM-DD HH:mm:ss.SSSSSSSSS","defaultColumns":["message"],"defaultIndex":"3dd09b40-b302-11eb-8677-fd4740a7c42a"},"coreMigrationVersion":"7.12.0","id":"7.12.0","migrationVersion":{"config":"7.12.0"},"references":[],"type":"config","updated_at":"2021-07-02T05:10:07.453Z","version":"Wzc3NjUxLDExXQ=="}
{"attributes":{"fieldAttrs":"{}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"role-service*"},"coreMigrationVersion":"7.12.0","id":"a26fc570-b6d7-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-05-17T06:18:02.439Z","version":"WzYwMjE4LDExXQ=="}
{"attributes":{"fieldAttrs":"{}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"notify-service-v1*"},"coreMigrationVersion":"7.12.0","id":"cf0150c0-bf9e-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-05-28T10:23:56.364Z","version":"WzY0Mjc1LDExXQ=="}
{"attributes":{"fieldAttrs":"{\"service.version\":{\"count\":2}}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"others*"},"coreMigrationVersion":"7.12.0","id":"cb829560-b3d9-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-05-31T02:53:05.046Z","version":"WzcxMjI4LDExXQ=="}
{"attributes":{"fieldAttrs":"{\"json.content\":{\"count\":13},\"json.duration\":{\"count\":7},\"json.level\":{\"count\":5},\"json.span\":{\"count\":4},\"json.trace\":{\"count\":4},\"log.file.path\":{\"count\":4},\"message\":{\"count\":10},\"service.name\":{\"count\":1},\"service.version\":{\"count\":2}}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"*-service*"},"coreMigrationVersion":"7.12.0","id":"3dd09b40-b302-11eb-8677-fd4740a7c42a","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-06-22T02:40:13.017Z","version":"Wzc1ODg4LDExXQ=="}
{"attributes":{"fieldAttrs":"{\"json.content\":{\"count\":2},\"message\":{\"count\":11},\"_id\":{\"count\":8},\"_type\":{\"count\":1},\"json.level\":{\"count\":6}}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"trace-service-v2*"},"coreMigrationVersion":"7.12.0","id":"d2394ae0-c1ba-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-06-30T07:33:22.471Z","version":"Wzc2OTk3LDExXQ=="}
{"attributes":{"timeFieldName":"@timestamp","title":"auth-service-v1*"},"coreMigrationVersion":"7.12.0","id":"66aa7500-daf2-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-07-02T05:00:20.432Z","version":"Wzc3NTQ2LDExXQ=="}
{"attributes":{"timeFieldName":"@timestamp","title":"*-service-v1*"},"coreMigrationVersion":"7.12.0","id":"65763ac0-daf2-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-07-02T05:00:18.412Z","version":"Wzc3NTQyLDExXQ=="}
{"attributes":{"timeFieldName":"@timestamp","title":"*-service-v2*"},"coreMigrationVersion":"7.12.0","id":"661030d0-daf2-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-07-02T05:00:19.421Z","version":"Wzc3NTQ0LDExXQ=="}
{"attributes":{"timeFieldName":"@timestamp","title":"department-service-v2*"},"coreMigrationVersion":"7.12.0","id":"67441cf0-daf2-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-07-02T05:00:21.439Z","version":"Wzc3NTQ4LDExXQ=="}
{"attributes":{"timeFieldName":"@timestamp","title":"gateway-service-v2*"},"coreMigrationVersion":"7.12.0","id":"69105170-daf2-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-07-02T05:00:24.455Z","version":"Wzc3NTU0LDExXQ=="}
{"attributes":{"timeFieldName":"@timestamp","title":"gateway-service-v1*"},"coreMigrationVersion":"7.12.0","id":"687c9cf0-daf2-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-07-02T05:00:23.487Z","version":"Wzc3NTUyLDExXQ=="}
{"attributes":{"timeFieldName":"@timestamp","title":"process-service-v2*"},"coreMigrationVersion":"7.12.0","id":"6c104b00-daf2-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-07-02T05:00:29.489Z","version":"Wzc3NTY0LDExXQ=="}
{"attributes":{"timeFieldName":"@timestamp","title":"file-service-v1*"},"coreMigrationVersion":"7.12.0","id":"67dc8c60-daf2-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-07-02T05:00:22.438Z","version":"Wzc3NTUwLDExXQ=="}
{"attributes":{"timeFieldName":"@timestamp","title":"pay-service-v1*"},"coreMigrationVersion":"7.12.0","id":"6b7606d0-daf2-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-07-02T05:00:28.477Z","version":"Wzc3NTYyLDExXQ=="}
{"attributes":{"timeFieldName":"@timestamp","title":"proof-service-v1*"},"coreMigrationVersion":"7.12.0","id":"6ca9cbe0-daf2-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-07-02T05:00:30.494Z","version":"Wzc3NTY2LDExXQ=="}
{"attributes":{"timeFieldName":"@timestamp","title":"swagger-service-v2*"},"coreMigrationVersion":"7.12.0","id":"6faef590-daf2-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-07-02T05:00:35.561Z","version":"Wzc3NTc0LDExXQ=="}
{"attributes":{"timeFieldName":"@timestamp","title":"template-service-v2*"},"coreMigrationVersion":"7.12.0","id":"704198a0-daf2-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-07-02T05:00:36.522Z","version":"Wzc3NTc2LDExXQ=="}
{"attributes":{"timeFieldName":"@timestamp","title":"swagger-service-v1*"},"coreMigrationVersion":"7.12.0","id":"6f14ff80-daf2-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-07-02T05:00:34.552Z","version":"Wzc3NTcyLDExXQ=="}
{"attributes":{"timeFieldName":"@timestamp","title":"tx-service-v1*"},"coreMigrationVersion":"7.12.0","id":"7173d710-daf2-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-07-02T05:00:38.529Z","version":"Wzc3NTgwLDExXQ=="}
{"attributes":{"timeFieldName":"@timestamp","title":"user-service-v1*"},"coreMigrationVersion":"7.12.0","id":"720e4250-daf2-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-07-02T05:00:39.541Z","version":"Wzc3NTgyLDExXQ=="}
{"attributes":{"timeFieldName":"@timestamp","title":"role-service-v2*"},"coreMigrationVersion":"7.12.0","id":"6e7e8be0-daf2-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-07-02T05:00:33.566Z","version":"Wzc3NTcwLDExXQ=="}
{"attributes":{"columns":["json.content","json.duration","json.level","json.span","json.trace"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"exists\",\"key\":\"json.content\",\"value\":\"exists\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"exists\":{\"field\":\"json.content\"},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[["@timestamp","desc"]],"title":"json","version":1},"coreMigrationVersion":"7.12.0","id":"df93aa50-b30f-11eb-8677-fd4740a7c42a","migrationVersion":{"search":"7.9.3"},"references":[{"id":"3dd09b40-b302-11eb-8677-fd4740a7c42a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"3dd09b40-b302-11eb-8677-fd4740a7c42a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"search","updated_at":"2021-05-12T10:50:32.181Z","version":"WzU1NTYxLDExXQ=="}
{"exportedCount":23,"missingRefCount":0,"missingReferences":[]}
\ No newline at end of file
kibana/index-pattern.ndjson 0 → 100644
View file @ 706ca087
{"attributes":{"fieldAttrs":"{\"message\":{\"count\":1}}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"*gateway*"},"coreMigrationVersion":"7.12.0","id":"08f1a5f0-360a-11ec-86c8-c7480f34ef7e","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"sort":[1635217912918,1835],"type":"index-pattern","updated_at":"2021-10-26T03:11:52.918Z","version":"WzEzNjE4MiwyMF0="}
{"attributes":{"fieldAttrs":"{}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"*test*backend*"},"coreMigrationVersion":"7.12.0","id":"0bedebd0-ef86-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"sort":[1627464456973,710],"type":"index-pattern","updated_at":"2021-07-28T09:27:36.973Z","version":"WzExNTM5MiwyMF0="}
{"attributes":{"fieldAttrs":"{\"json.level\":{\"count\":1},\"service.name\":{\"count\":1}}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"*tanxin*mingzong*oa*"},"coreMigrationVersion":"7.12.0","id":"0f1c07a0-360e-11ec-86c8-c7480f34ef7e","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"sort":[1635220152459,1852],"type":"index-pattern","updated_at":"2021-10-26T03:49:12.459Z","version":"WzEzNzQzOSwyMF0="}
{"attributes":{"fieldAttrs":"{\"json.span\":{\"count\":2},\"json.level\":{\"count\":2}}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"*production*backend*"},"coreMigrationVersion":"7.12.0","id":"189c04b0-ef8c-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"sort":[1628838308113,860],"type":"index-pattern","updated_at":"2021-08-13T07:05:08.113Z","version":"WzExNTU0NywyMF0="}
{"attributes":{"fieldAttrs":"{\"env\":{\"count\":2},\"message\":{\"count\":6}}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"*police*supervisor*"},"coreMigrationVersion":"7.12.0","id":"1e32f200-1c1c-11ec-aa11-47462642bc5d","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"sort":[1635158479256,1819],"type":"index-pattern","updated_at":"2021-10-25T10:41:19.256Z","version":"WzEzNTU3NywyMF0="}
{"attributes":{"fieldAttrs":"{}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"*demo*externaldb*"},"coreMigrationVersion":"7.12.0","id":"26830990-2cd9-11ec-86c8-c7480f34ef7e","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"sort":[1634207170729,1749],"type":"index-pattern","updated_at":"2021-10-14T10:26:10.729Z","version":"WzEyODkyMiwyMF0="}
{"attributes":{"fieldAttrs":"{}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"*demo*"},"coreMigrationVersion":"7.12.0","id":"2a4c18f0-00ba-11ec-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"sort":[1629356011519,871],"type":"index-pattern","updated_at":"2021-08-19T06:53:31.519Z","version":"WzExNTU1OCwyMF0="}
{"attributes":{"fieldAttrs":"{}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"*tanxin*mingzong*talk*"},"coreMigrationVersion":"7.12.0","id":"32d38dd0-360e-11ec-86c8-c7480f34ef7e","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"sort":[1635219515181,1846],"type":"index-pattern","updated_at":"2021-10-26T03:38:35.181Z","version":"WzEzNjgzOCwyMF0="}
{"attributes":{"fieldAttrs":"{\"json.content\":{\"count\":1},\"json.span\":{\"count\":1},\"message\":{\"count\":1}}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"*demo*backend*"},"coreMigrationVersion":"7.12.0","id":"3aaf5950-00ba-11ec-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"sort":[1629356242989,874],"type":"index-pattern","updated_at":"2021-08-19T06:57:22.989Z","version":"WzExNTU2MSwyMF0="}
{"attributes":{"fieldAttrs":"{}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"timestamp","title":".monitoring-es*"},"coreMigrationVersion":"7.12.0","id":"3bd9a380-1208-11ec-919b-13636c2c5db1","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"sort":[1631258711480,939],"type":"index-pattern","updated_at":"2021-09-10T07:25:11.480Z","version":"WzExNTYzMCwyMF0="}
{"attributes":{"fieldAttrs":"{\"log.file.path\":{\"count\":2},\"log.offset\":{\"count\":1}}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"*prod*person*"},"coreMigrationVersion":"7.12.0","id":"3df0eb70-30ac-11ec-86c8-c7480f34ef7e","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"sort":[1634628388159,1770],"type":"index-pattern","updated_at":"2021-10-19T07:26:28.159Z","version":"WzEzNDQwMywyMF0="}
{"attributes":{"fieldAttrs":"{}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"*production*externaldb*"},"coreMigrationVersion":"7.12.0","id":"48d00340-2cd9-11ec-86c8-c7480f34ef7e","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"sort":[1634207228276,1750],"type":"index-pattern","updated_at":"2021-10-14T10:27:08.276Z","version":"WzEyODk0NiwyMF0="}
{"attributes":{"fieldAttrs":"{\"service.name\":{\"count\":2}}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"*prod*person*backend*"},"coreMigrationVersion":"7.12.0","id":"52e17c20-30ac-11ec-86c8-c7480f34ef7e","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"sort":[1634628089928,1769],"type":"index-pattern","updated_at":"2021-10-19T07:21:29.928Z","version":"WzEzNDM1MywyMF0="}
{"attributes":{"fieldAttrs":"{\"json.span\":{\"count\":2},\"json.level\":{\"count\":2},\"message\":{\"count\":1},\"log.file.path\":{\"count\":1}}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"*test*backend*v2*"},"coreMigrationVersion":"7.12.0","id":"533e9ac0-ef86-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"sort":[1632732609452,1698],"type":"index-pattern","updated_at":"2021-09-27T08:50:09.452Z","version":"WzExNjU3NCwyMF0="}
{"attributes":{"fieldAttrs":"{\"env\":{\"count\":4},\"log.file.path\":{\"count\":7}}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"*other*"},"coreMigrationVersion":"7.12.0","id":"6f91e2e0-ef86-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"sort":[1633662180847,1712],"type":"index-pattern","updated_at":"2021-10-08T03:03:00.847Z","version":"WzEyMjA0MSwyMF0="}
{"attributes":{"fieldAttrs":"{}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"*prod*person*externaldb*"},"coreMigrationVersion":"7.12.0","id":"6feb1bf0-30ac-11ec-86c8-c7480f34ef7e","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"sort":[1634627771183,1767],"type":"index-pattern","updated_at":"2021-10-19T07:16:11.183Z","version":"WzEzNDI3NywyMF0="}
{"attributes":{"fieldAttrs":"{\"service.name\":{\"count\":3},\"message\":{\"count\":16},\"json.content\":{\"count\":4},\"json.content.keyword\":{\"count\":1},\"json.span\":{\"count\":1},\"json.trace\":{\"count\":2},\"log.file.path\":{\"count\":1},\"json.level\":{\"count\":1}}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"*test*"},"coreMigrationVersion":"7.12.0","id":"71f46820-ef7f-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"sort":[1635219834463,1847],"type":"index-pattern","updated_at":"2021-10-26T03:43:54.463Z","version":"WzEzNzA1NSwyMF0="}
{"attributes":{"fieldAttrs":"{\"json.content\":{\"count\":1},\"json.level\":{\"count\":1},\"message\":{\"count\":1}}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"json.@timestamp","title":"*test*backend*v1*"},"coreMigrationVersion":"7.12.0","id":"844b6210-21db-11ec-86c8-c7480f34ef7e","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"sort":[1632998787728,1710],"type":"index-pattern","updated_at":"2021-09-30T10:46:27.728Z","version":"WzEyMTI4NywyMF0="}
{"attributes":{"fieldAttrs":"{\"log.file.path\":{\"count\":9},\"log.offset\":{\"count\":1},\"service.program.keyword\":{\"count\":1}}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"*production*supervisor*"},"coreMigrationVersion":"7.12.0","id":"b851fb20-1b8a-11ec-919b-13636c2c5db1","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"sort":[1632359125070,979],"type":"index-pattern","updated_at":"2021-09-23T01:05:25.070Z","version":"WzExNTY4MCwyMF0="}
{"attributes":{"fieldAttrs":"{}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"*production*"},"coreMigrationVersion":"7.12.0","id":"de035020-ef85-11eb-bdce-75a994460910","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"sort":[1627464379938,709],"type":"index-pattern","updated_at":"2021-07-28T09:26:19.938Z","version":"WzExNTM5MSwyMF0="}
{"attributes":{"fieldAttrs":"{}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"*tanxin*police*talk*"},"coreMigrationVersion":"7.12.0","id":"fc816850-3622-11ec-86c8-c7480f34ef7e","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"sort":[1635228443477,1880],"type":"index-pattern","updated_at":"2021-10-26T06:07:23.477Z","version":"WzEzOTYxOCwyMF0="}
{"attributes":{"fieldAttrs":"{\"json.content\":{\"count\":1},\"message\":{\"count\":3}}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"*tanxin*police*oa*"},"coreMigrationVersion":"7.12.0","id":"fe4210a0-360d-11ec-86c8-c7480f34ef7e","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"sort":[1635228312672,1877],"type":"index-pattern","updated_at":"2021-10-26T06:05:12.672Z","version":"WzEzOTU0NiwyMF0="}
{"exportedCount":22,"missingRefCount":0,"missingReferences":[]}
\ No newline at end of file
logstash/pipeline/logstash.conf
View file @ 706ca087
......@@ -15,10 +15,20 @@ filter {
if "stat.log" in [log][file][path] {
drop {}
}
if "chain" in [log][file][path] {
if "error" in[log][file][path] {
}else if "chain" in [log][file][path] {
drop {}
}else if "Chain" in [log][file][path] {
drop {}
}else if "convert" in [log][file][path]{
if "person" in [env]{
drop{}
}else if "demo" in [env] {
drop{}
}
}
if "convert" in [log][file][path] {
if "backend-env-v1" in [log][file][path] {
drop {}
}
mutate {
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment