filebeat.yml

• 方法一 ndjson方式
  (不配置模块)
  https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-filestream.html#_prospector_scanner_include_files

filebeat.inputs:
- type: filestream
  enabled: true
  paths: 
    - /dataN/ngx8/logs-A100/access-*.log
    - /dataN/ngx8/logs-A100/error.log
  parsers:
    - ndjson:
        target: ""
        message_key: ""

• 方法二log方式
  https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html#drop-event-example

filebeat.inputs:
- type: log
  enabled: true
  paths: 
    - /dataN/ngx8/logs-A100/access-*.log
    - /dataN/ngx8/logs-A100/error.log
  json.keys_under_root: true              
  json.overwrite_keys: true