filebeat删除多余标签 

filebeat.inputs:
- type: docker
  containers.ids:
    - 'b77cea34ab4512727a1ae5e14073640c286dcd13d030cb114a9e6befead05a3b'
setup.kibana:
  hosts: ["xx.xx.xxx.xxx:9200"]

output.elasticsearch:
  hosts: ["xx.xxx.xx.xx:9200"]
  index: "tomcat-b1-%{+yyyy.MM.dd}"

processors:
- drop_fields:
    fields: ["input_type", "log.offset", "host.name", "input.type", "agent.hostname", "agent.type", "ecs.version", "agent.ephemeral_id", "agent.id", "agent.version", "fields.ics", "log.file.path", "log.flags" ]


setup.template.name: "tomcat"
setup.template.pattern: "tomcat-*"
setup.template.enabled: true
setup.ilm.enabled: false

 

posted @ 2020-03-17 10:06  liuYGoo  阅读(949)  评论(0)  编辑  收藏  举报