ELK收集MYSQL日志实战

cd /usr/local/logstash/config/etc/，创建如下配置文件，代码如下：

1) 日志采集-存入Redis缓存数据库；

agent.conf文件内容：input {

 file {
      type => "mysql-access"
      path => "/var/log/mysqld.log" 
 } 
}
output { 
redis { 
      host => "localhost" 
      port => 6379 
      data_type => "list" 
      key => "logstash" 
 }
}

启动Agent：

../bin/logstash -f agent.conf

2) Redis数据-存入ES；

index.conf文件内容：

input {
   redis {
   host => "localhost"
   port => "6379"
   data_type => "list"
   key => "logstash"
   type => "redis-input"
   batch_count => 1 
 }
}
output { 
   elasticsearch { 
   hosts => "192.168.111.128" 
 } 
}

启动index：

../bin/logstash -f index.conf

 

查看启动进程：