Filebeat的input终于支持了http,可以使用post请求向filebeat的input传输数据,不过现在还是处于beta版本
参考
1 2
| https://www.elastic.co/guide/en/beats/filebeat/7.x/filebeat-input-http_endpoint.html
|
下载filebeat最新版本,然后解压
1 2
| wget https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.9.2-linux-x86_64.tar.gz
|
配置 filebeat_http.yml
1 2 3 4 5 6 7 8 9 10 11
| filebeat.inputs: - type: http_endpoint enabled: true listen_address: localhost listen_port: 19080
#----------------------------------File output--------------------------------# output.file: path: "/tmp/filebeat" filename: filebeat
|
给配置文件赋权
1 2
| chmod go-w ./filebeat_http.yml
|
启动filebeat
1 2
| ./filebeat -e -c filebeat_http.yml
|
向19080端口发送post请求
1 2 3
| curl -XPOST http://localhost:19080 -H 'Content-Type:application/json' -d'{"a":"b"}' {"message": "success"}
|
不支持get请求
去/tmp/filebeat中查看
1 2 3
| lintong@master:/tmp/filebeat$ tail -n 100 filebeat {"@timestamp":"2020-10-10T09:44:22.294Z","@metadata":{"beat":"filebeat","type":"_doc","version":"7.9.2"},"json":{"a":"b"},"input":{"type":"http_endpoint"},"ecs":{"version":"1.5.0"},"host":{"name":"master"},"agent":{"hostname":"master","ephemeral_id":"20bf06ed-3421-44b8-aeaf-bb5d54565eb3","id":"78e98f32-c8ce-4505-b75e-c98f373a2205","name":"master","type":"filebeat","version":"7.9.2"}}
|