ELK收集MYSQL日志实战

cd /usr/local/logstash/config/etc/，创建如下配置文件，代码如下： 1) 日志采集-存入Redis缓存数据库； agent.conf文件内容：input {

 file {
      type => "MysqL-access"
      path => "/var/log/MysqLd.log" 
 } 
}
output { 
redis { 
      host => "localhost" 
      port => 6379 
      data_type => "list" 
      key => "logstash" 
 }
}

启动Agent： ../bin/logstash -f agent.conf 2) Redis数据-存入ES； index.conf文件内容：

input {
   redis {
   host => "localhost"
   port => "6379"
   data_type => "list"
   key => "logstash"
   type => "redis-input"
   batch_count => 1 
 }
}
output { 
   elasticsearch { 
   hosts => "192.168.111.128" 
 } 
}

启动index： ../bin/logstash -f index.conf   查看启动进程：