thx all, I will keep stay focus. 在 2016年9月8日星期四 UTC+8下午5:36:08，Marius Sturm写道： > > The Beats output is a list of target hosts so you can do something like: [' > 1.1.1.1:5044', '2.2.2.2:5044'] > We have kept the concept of routes for the Beats backend because it helps > the user to not accidently end up in a situation where you have inputs but > no outputs configured. Even when it's not directly reflected in the > configuration file. > > Cheers, > Marius > > > On 8 September 2016 at 02:20, Michael Anthon <[email protected] > <javascript:>> wrote: > >> I ran into this issue last night as well. It seems to me (from looking >> at the beats doco) that beats doesn't handle multiple outputs. I'm not >> sure how graylog is deciding which output to use but it seems that we can't >> use this type of setup for beats (regardless of the fact that the interface >> allows you to configure it). >> >> Unless I'm missing something completely Beats doesn't seem to have the >> concept of "routes" like nxlog does, there is no way to associate an input >> to an output. >> >> On Tuesday, 6 September 2016 17:57:41 UTC+10, IronCocker wrote: >>> >>> [root@mirror ~]# more >>> /etc/graylog/collector-sidecar/generated/filebeat.yml >>> filebeat: >>> prospectors: >>> - document_type: linux >>> fields: >>> gl2_source_collector: 0d2e5631-e187-4f09-b1a1-562908f44631 >>> ignore_older: 0 >>> input_type: log >>> paths: >>> - /var/log/* >>> scan_frequency: 10s >>> tail_files: true >>> - document_type: nginx >>> fields: >>> gl2_source_collector: 0d2e5631-e187-4f09-b1a1-562908f44631 >>> ignore_older: 0 >>> input_type: log >>> paths: >>> - /var/log/nginx/* >>> scan_frequency: 10s >>> tail_files: true >>> output: >>> logstash: >>> hosts: >>> - 192.168.1.1:5044 >>> >>> Hi, >>> I configured two tags: *linux* and *nginx*, tag *linux* output [' >>> 192.168.1.1:*5044*'], tag *nginx* output ['192.168.1.1:*5055*'], but >>> *filebeat.yml* only have *linux* output, How should i do？ >>> thx. >>> >> -- >> You received this message because you are subscribed to the Google Groups >> "Graylog Users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/graylog2/ed2047db-631b-44aa-ae10-246ba787dfa1%40googlegroups.com >> >> <https://groups.google.com/d/msgid/graylog2/ed2047db-631b-44aa-ae10-246ba787dfa1%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> For more options, visit https://groups.google.com/d/optout. >> > > > > -- > Developer > > Tel.: +49 (0)40 609 452 077 > Fax.: +49 (0)40 609 452 078 > > TORCH GmbH - A Graylog Company > Poolstraße 21 > 20335 Hamburg > Germany > > https://www.graylog.com <https://www.torch.sh/> > > Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175 > Geschäftsführer: Lennart Koopmann (CEO) >
-- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/c1c3c346-28ec-4c18-a555-36924a1c1d61%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
