Logstash 日志存储配置错误:未知设置';开始位置';对于文件{:level=>;:error}
我正在学习elk,配置文件有问题:logstash.config以下是配置:Logstash 日志存储配置错误:未知设置';开始位置';对于文件{:level=>;:error},logstash,Logstash,我正在学习elk,配置文件有问题:logstash.config以下是配置: input { file { path => "E:/elk/log/access_test.log" start_position => beginning } } filter { grok { match => { "message" =&g
input {
file {
path => "E:/elk/log/access_test.log"
start_position => beginning
}
}
filter {
grok {
match => {
"message" => "%{COMBINEDAPACHELOG}"
}
}
date {
locale => "en"
match => [ "timestamp" , "dd/MMM/YYYY:HH:mm:ss Z", "ISO8601" ]
}
}
output {
file {
path => "E:/elk/log/logstash-access_test.log"
start_position => beginning
}
}
当我运行配置时,标题的错误就会出现。有人能告诉我原因吗?输出文件插件没有
start\u position
属性试试这个
input {
file {
path => "E:/elk/log/access_test.log"
start_position => beginning
}
}
filter {
grok {
match => {
"message" => "%{COMBINEDAPACHELOG}"
}
}
date {
locale => "en"
match => [ "timestamp" , "dd/MMM/YYYY:HH:mm:ss Z", "ISO8601" ]
}
}
output {
file {
path => "E:/elk/log/logstash-access_test.log"
}
}
另外,如果有帮助,可以使用--configtest调用logstash,它应该为您提供更多信息,特别是行/列号 希望这将确认问题是在输出而不是输入