# 配置索引模板名称和模式 setup.template.name: "prod-sourcing-agents" setup.template.pattern: "prod-sourcing-agents*" setup.template.enabled: true setup.ilm.enabled: true #主配置文件加载子配置文件 filebeat.config.inputs: enabled: true path: /etc/filebeat/inputs.d/*.yml reload.enabled: true reload.period: 10s #输出 output.elasticsearch: hosts: ["http://106.53.194.199:9200"] username: "admin" password: "123456" index: "%{[environment]}-%{[application]}-%{+yyyy.MM}" # 按月分割索引 bulk_max_size: 50 # 单批次传输最大文档数 worker: 1 # 并行工作线程数 timeout: 15s # 日志记录 logging.level: info logging.to_files: true logging.files: path: /var/log/filebeat name: filebeat.log keepfiles: 7 permissions: 0644 # 设置队列和内存使用 queue.mem: events: 1024 flush.min_events: 512 flush.timeout: 10s