一、vim filebeat-6.3.2-linux-x86_64/filebeat.yml
- type: log
# Change to true to enable this input configuration.
#enabled: false 改为true才生效
enabled: true
# Paths that should be crawled and fetched. Glob based paths.
paths:
#- /var/log/*.log
- /home/elk/nginx/logs/error.log
#- c:\programdata\elasticsearch\logs\*
启动filebeat
/home/elk/filebeat-6.3.2-linux-x86_64/filebeat &
二、图示：
原文：https://www.cnblogs.com/zhaojingyu/p/9534985.html