logstash tomcat catalina.out zabbix 插件不会引起崩溃
2016-09-22 21:10
309 查看
input { file { type => "zj_api" path => ["/data01/applog_backup/zjzc_log/zj-api*catalina*"] } file { type => "wj_api" path => ["/data01/applog_backup/winfae_log/wj-api*catalina*"] } } filter { multiline { pattern => "^\s+%{TIMESTAMP_ISO8601}" negate=>true what=>"previous" } mutate { add_field => [ "[@metadata][zabbix_key]" , "logstash-api-access" ] add_field => [ "[@metadata][zabbix_host]" , "dr-mysql01" ] add_field =>["messager","%{type}-%{message}"] remove_field =>["message"] } } filter { grok { match => [ "messager","(?m)\s*%{TIMESTAMP_ISO8601:time}\s+(?<Level>(\S+)).*"] } date { match => ["time", "yyyy-MM-dd HH:mm:ss,SSS"] } } output { if ([Level] == "ERROR" or [messager] =~ "Exception" ) and [messager] !~ "温金服务未连接" { zabbix { zabbix_host => "[@metadata][zabbix_host]" zabbix_key => "[@metadata][zabbix_key]" zabbix_server_host => "192.168.32.55" zabbix_server_port => "10051" zabbix_value => "messager" } } if [type] == "zj_api" { redis { host => "192.168.32.67" data_type => "list" key => "zj_api:redis" port=>"6379" password => "1234567" } } else if [type] == "wj_api"{ redis { host => "192.168.32.67" data_type => "list" key => "wj_api:redis" port=>"6379" password => "1234567" } } } { "@version" => "1", "@timestamp" => "2016-09-22T13:06:58.392Z", "path" => "/data01/applog_backup/zjzc_log/zj-api01-catalina.out.2016-09-22", "host" => "dr-mysql01.zjcap.com", "type" => "zj_api", "tags" => [ [0] "multiline", [1] "_grokparsefailure" ], "messager" => "zj_api- yrywqrq23423423432" } { "@version" => "1", "@timestamp" => "2016-09-22T13:08:30.770Z", "path" => "/data01/applog_backup/zjzc_log/zj-api01-catalina.out.2016-09-22", "host" => "dr-mysql01.zjcap.com", "type" => "zj_api", "messager" => "zj_api- 2016-09-22 21:08:30,770 INFO com.zjzc.common.utils.HttpUtil - 请求参数: ", "time" => "2016-09-22 21:08:30,770", "Level" => "INFO" } { "@version" => "1", "@timestamp" => "2016-09-22T13:08:30.839Z", "path" => "/data01/applog_backup/zjzc_log/zj-api01-catalina.out.2016-09-22", "host" => "dr-mysql01.zjcap.com", "type" => "zj_api", "messager" => "zj_api- 2016-09-22 21:08:30,839 INFO com.zjzc.common.utils.HttpUtil - 请求接口: https://www.zjcap.cn/pay/interface/bankchannellist, 耗时=-68 ", "time" => "2016-09-22 21:08:30,839", "Level" => "INFO" } 这种情况下,即使匹配不上 也不会造成logstash zabbix插件崩掉
相关文章推荐
- Linux下设置Tomcat自启动
- 数据连接池的应用之JavaWeb服务器管理数据源:Tomcat(三)
- tomcat使用所遇到的问题
- nginx +tomcat 动静分离
- apache +tomcat 集群配置
- 解决一个web项目的某个功能的流程
- 配置tomcat7自带jdbc连接池、简单好用!
- 用apache和tomcat搭建集群,实现负载均衡
- nginx 和 Tomcat 整合
- tomcat跨域访问(CROS)
- Maven tomcat7-maven-plugin 部署Maven Web 项目
- 常用的数据源配置
- tomcat+java 占cpu 调试【top命令应用】
- Error running Tomcat 7: Address localhost:1099 is already in use
- JavaWeb学习总结(三)——Tomcat服务器学习和使用(二)
- 配置tomcat下war包可以自压缩
- Tomcat启动脚本startup.sh分析
- tomcat运行控制脚本catalina.sh
- Nginx+tomcat配置集群负载均衡
- SolrCloud+Tomcat+Zookeeper配置----参考二