更改

filebast/s1-lessie-server01/s1_lessie_search.yml

@@ -0,0 +1,25 @@
+- type: log
+  id: s1_lessie_search
+  enabled: true
+  paths:
+    - /data/webapps/lessie_sourcing_agents/logs/lessie_sourcing_agents_*.log
+  include_lines: ['^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2},\d{3}'] # 只包含匹配该正则表达式的行
+  fields:
+    application: lessie_search
+    log_type: lessie_search.log
+    environment: s1
+    instance: weblessie-server
+    ip: 43.130.56.138
+  fields_under_root: true
+  # multiline.pattern: '^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2},\d{3}'
+  # multiline.negate: true
+  # multiline.match: after
+  ignore_older: 24h   # 忽略旧日志文件（避免处理已归档的日志）
+  scan_frequency: 10s   # 定期扫描新文件的频率
+  clean_inactive: 25h   # 清除超过一天未更新的文件
+  close_inactive: 5m    # 文件超过5分钟无更新则关闭
+  close_renamed: true   # 处理被重命名的文件
+  start_position: beginning   # 从文件的开头读取
+
+
+