[log]logstash重要参数

sincedb_path: 位置点文件路径

• Value type is string
• There is no default value for this setting.
• Path of the sincedb database file (keeps track of the current position of monitored log files) that will be written to disk. The default will write sincedb files to some path matching $HOME/.sincedb*
• NOTE: it must be a file path and not a directory path

sincedb_write_interval: 多久记录一次位置点,默认15s

• Value type is number
• Default value is 15
• How often (in seconds) to write a since database with the current position of monitored log files.

start_position: 第一次读文件时候,从头读

• Value can be any of: beginning, end
• Default value is "end"

stat_interval:多久检测一次日志文件变化:默认1s

• Value type is number
• Default value is 1
• How often (in seconds) we stat files to see if they have been modified. Increasing this interval will decrease the number of system calls we make, but increase the time to detect new log lines.

tags: 给messge打标签

• Value type is array
• There is no default value for this setting.
Add any number of arbitrary tags to your event.
This can help with processing later.

来自 <http://blog.csdn.net/wjacketcn/article/details/50960843>

type: 给日志增加类型字段

• Value type is string
• There
4000
is no default value for this setting.
Add a type field to all events handled by this input.