Vector配置

官方记录:https://github.com/vectordotdev/vector/issues/2137

目前只支持file、docker

[sources.multiline_logs]
type = "file"
include = [ "/opt/multiline.log" ]
	[sources.multiline_logs.multiline]
		start_pattern = '^<\d+>'
		mode = "halt_before"
		condition_pattern = '<\d+>'
		timeout_ms = 1000

流氓使用:将获取的信息写入file在读取

 

调试使用,每次启动vector都从头消费文件日志:

data_dir = "D:\\vector_log"
[sources.file]
type = "file"
include = ["D:\\vector_log\\xxx*log"]
ignore_checkpoints=true  # 从头消费

 

Clickhouse批量发送:

[sinks.ck]
type = "clickhouse"
inputs = ["6e05d2"]
endpoint = "http://127.0.0.1:8123"
database = "database"
compression = "gzip"
auth.strategy = "basic"
auth.user = "username"
auth.password = "pwd"
# 批量发送, 缓冲区
batch.max_bytes = 100000 # 根据实际日志文件大小调整
batch.timeout_secs = 1
buffer.type = "memory"
buffer.max_events = 500 # 缓冲区事件达到500就发送,保存在内存中
table = "PWEB"

 

posted @   XSWClevo  阅读(338)  评论(0编辑  收藏  举报
相关博文:
阅读排行:
· 一个费力不讨好的项目,让我损失了近一半的绩效!
· 清华大学推出第四讲使用 DeepSeek + DeepResearch 让科研像聊天一样简单!
· 实操Deepseek接入个人知识库
· CSnakes vs Python.NET:高效嵌入与灵活互通的跨语言方案对比
· Plotly.NET 一个为 .NET 打造的强大开源交互式图表库
点击右上角即可分享
微信分享提示