2
0

filebeat-cm-multiple-lines.yaml 778 B

12345678910111213141516171819202122232425262728293031
  1. apiVersion: v1
  2. kind: ConfigMap
  3. metadata:
  4. name: filebeatconf
  5. data:
  6. filebeat.yml: |-
  7. filebeat.inputs:
  8. - input_type: log
  9. paths:
  10. - /data/log/*/*/*.log
  11. tail_files: true
  12. # fields_under_root: true # 将fields[pod_name] 变成[pod_name]
  13. fields:
  14. pod_name: '${podName}'
  15. pod_ip: '${podIp}'
  16. pod_deploy_name: '${podDeployName}'
  17. pod_namespace: '${podNamespace}'
  18. tags: [test-filebeat]
  19. #排除空行
  20. exclude_lines: ['^$']
  21. #java多行日志合并
  22. multiline:
  23. pattern: '^\d{1,2}:\d{1,2}:\d{1,2}\.\d{3}'
  24. negate: true
  25. match: after
  26. output.kafka:
  27. hosts: ["kafka:9092"]
  28. topic: "test-filebeat"
  29. codec.json:
  30. pretty: false
  31. keep_alive: 30s