dxin/Work-configuration-file
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

更改filebast配置

Browse Source
This commit is contained in:
dxin
2025-12-11 15:17:03 +08:00
parent 7ad9956c5d
commit 6f7b24926d
8 changed files with 35 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
filebast/us-prod-01/filebeat.yml
View File

@@ -18,7 +18,7 @@ processors:
when:
equals:
log_type: admin.log
tokenizer: '%{timestamp} %{level} %{pid} --- \\[%{thread}\\] %{class} : %{message}'
tokenizer: '%{timestamp} %{level} %{pid} --- [%{thread}] %{class} : [%{app_name->}] %{message}'
field: "message"
target_prefix: "mylog"
ignore_missing: true

2
filebast/us-prod-01/flymoon-admin.yml
View File

@@ -9,7 +9,7 @@
environment: us-pord # 自定义字段，标识机器环境名称
instance: us-prod-01 # 自定义字段，标识机器名称
fields_under_root: true
multiline.pattern: '^\d{4}-\d{2}-\d{2}\ \d{2}:\d{2}:\d{2}\.\d{3}'
multiline.pattern: '^\d{4}-\d{2}-\d{2}-\d{2}:\d{2}:\d{2}\.\d{3}'
multiline.negate: true
multiline.match: after
ignore_older: 24h # 忽略旧日志文件（避免处理已归档的日志）

2
filebast/us-prod-02/filebeat.yml
View File

@@ -37,7 +37,7 @@ processors:
when:
equals:
log_type: agent.log
tokenizer: '%{date} %{time} %{level} %{pid} --- [%{thread}] %{class->} : [%{app}] %{message}'
tokenizer: '%{timestamp} %{level} %{pid} --- [%{thread}] %{class} : [%{app_name->}] %{message}'
field: "message"
target_prefix: "mylog"
ignore_missing: true

2
filebast/us-prod-02/flymoon-agent.yml
View File

@@ -9,7 +9,7 @@
environment: us-pord # 自定义字段，标识机器环境名称
instance: us-prod-02 # 自定义字段，标识机器名称
fields_under_root: true
multiline.pattern: '^\d{4}-\d{2}-\d{2}\ \d{2}:\d{2}:\d{2}\.\d{3}'
multiline.pattern: '^\d{4}-\d{2}-\d{2}-\d{2}:\d{2}:\d{2}\.\d{3}'
multiline.negate: true
multiline.match: after
ignore_older: 24h # 忽略旧日志文件（避免处理已归档的日志）

4
filebast/us-prod-03/filebeat.yml
View File

@@ -26,7 +26,7 @@ processors:
when:
equals:
log_type: agent.log
tokenizer: '%{date} %{time} %{level} %{pid} --- [%{thread}] %{class->} : [%{app}] %{message}'
tokenizer: '%{timestamp} %{level} %{pid} --- [%{thread}] %{class} : [%{app_name->}] %{message}'
field: "message"
target_prefix: "mylog"
ignore_missing: true
@@ -38,7 +38,7 @@ processors:
when:
equals:
log_type: payment.log
tokenizer: '%{date} %{time} %{level} %{pid} --- [%{thread}] %{class->} : [%{app}] %{message}'
tokenizer: '%{timestamp} %{level} %{pid} --- [%{thread}] %{class} : [%{app_name->}] %{message}'
field: "message"
target_prefix: "mylog"
ignore_missing: true

2
filebast/us-prod-03/flymoon-agent.yml
View File

@@ -9,7 +9,7 @@
environment: us-pord # 自定义字段，标识机器环境名称
instance: us-prod-03 # 自定义字段，标识机器名称
fields_under_root: true
multiline.pattern: '^\d{4}-\d{2}-\d{2}\ \d{2}:\d{2}:\d{2}\.\d{3}'
multiline.pattern: '^\d{4}-\d{2}-\d{2}-\d{2}:\d{2}:\d{2}\.\d{3}'
multiline.negate: true
multiline.match: after
ignore_older: 24h # 忽略旧日志文件（避免处理已归档的日志）

2
filebast/us-prod-03/flymoon-payment.yml
View File

@@ -9,7 +9,7 @@
environment: us-pord
instance: us-prod-03
fields_under_root: true
multiline.pattern: '^\d{4}-\d{2}-\d{2}\ \d{2}:\d{2}:\d{2}\.\d{3}'
multiline.pattern: '^\d{4}-\d{2}-\d{2}-\d{2}:\d{2}:\d{2}\.\d{3}'
multiline.negate: true
multiline.match: after
ignore_older: 24h # 忽略旧日志文件（避免处理已归档的日志）