{"id":41349,"date":"2022-11-22T01:16:25","date_gmt":"2022-12-10T00:39:46","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8fluentd%e7%9b%91%e6%8e%a7apache%e7%9a%84%e8%ae%bf%e9%97%ae%e6%97%a5%e5%bf%97%ef%bc%8c%e5%b9%b6%e5%b0%86%e5%85%b6%e4%bc%a0%e8%be%93%e5%88%b0elasticsearch%e3%80%82\/"},"modified":"2024-04-29T01:52:33","modified_gmt":"2024-04-28T17:52:33","slug":"%e4%bd%bf%e7%94%a8fluentd%e7%9b%91%e6%8e%a7apache%e7%9a%84%e8%ae%bf%e9%97%ae%e6%97%a5%e5%bf%97%ef%bc%8c%e5%b9%b6%e5%b0%86%e5%85%b6%e4%bc%a0%e8%be%93%e5%88%b0elasticsearch%e3%80%82","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8fluentd%e7%9b%91%e6%8e%a7apache%e7%9a%84%e8%ae%bf%e9%97%ae%e6%97%a5%e5%bf%97%ef%bc%8c%e5%b9%b6%e5%b0%86%e5%85%b6%e4%bc%a0%e8%be%93%e5%88%b0elasticsearch%e3%80%82\/","title":{"rendered":"\u4f7f\u7528Fluentd\u76d1\u63a7Apache\u7684\u8bbf\u95ee\u65e5\u5fd7\uff0c\u5e76\u5c06\u5176\u4f20\u8f93\u5230Elasticsearch"},"content":{"rendered":"<h1>\u6211\u60f3\u505a\u7684\u4e8b\u60c5 (Wo xiang zuo de shiqing)<\/h1>\n<ul class=\"post-ul\">Apache\u306e\u30a2\u30af\u30bb\u30b9\u30ed\u30b0\u3092\u3001\u53ef\u8996\u5316\u30fb\u5206\u6790\u3059\u308b\u305f\u3081\u306e\u74b0\u5883\u3092\u4f5c\u308a\u305f\u3044<\/ul>\n<p>\u4ee5\u300c\u8fd9\u4e2a\u8bdd\u9898\u300d\u4e3a\u9898\u76ee\uff0c<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Apache\u306e\u30a2\u30af\u30bb\u30b9\u30ed\u30b0\u3092Fluentd\u3067tail\u3057\u3066<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">Elasticsearch\u306b\u653e\u308a\u8fbc\u307f\u3001Kibana\u3067\u53c2\u7167\u53ef\u80fd\u306a\u72b6\u614b\u306b\u3059\u308b<\/ul>\n<p>\u6211\u5c1d\u8bd5\u505a\u5230\u8fd9\u4e2a\u5730\u6b65\u3002<\/p>\n<h1>\u73af\u5883<\/h1>\n<p>\u6211\u4eec\u6b63\u5728\u4f7f\u7528Ubuntu Linux 18.04 LTS\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span><span class=\"nb\">cat<\/span> \/etc\/os-release \r\n<span class=\"nv\">NAME<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"Ubuntu\"<\/span>\r\n<span class=\"nv\">VERSION<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"18.04.1 LTS (Bionic Beaver)\"<\/span>\r\n<span class=\"nv\">ID<\/span><span class=\"o\">=<\/span>ubuntu\r\n<span class=\"nv\">ID_LIKE<\/span><span class=\"o\">=<\/span>debian\r\n<span class=\"nv\">PRETTY_NAME<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"Ubuntu 18.04.1 LTS\"<\/span>\r\n<span class=\"nv\">VERSION_ID<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"18.04\"<\/span>\r\n<span class=\"nv\">HOME_URL<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"https:\/\/www.ubuntu.com\/\"<\/span>\r\n<span class=\"nv\">SUPPORT_URL<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"https:\/\/help.ubuntu.com\/\"<\/span>\r\n<span class=\"nv\">BUG_REPORT_URL<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"https:\/\/bugs.launchpad.net\/ubuntu\/\"<\/span>\r\n<span class=\"nv\">PRIVACY_POLICY_URL<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"https:\/\/www.ubuntu.com\/legal\/terms-and-policies\/privacy-policy\"<\/span>\r\n<span class=\"nv\">VERSION_CODENAME<\/span><span class=\"o\">=<\/span>bionic\r\n<span class=\"nv\">UBUNTU_CODENAME<\/span><span class=\"o\">=<\/span>bionic\r\n<\/code><\/pre>\n<p>\u6b64\u5916\uff0c\u5173\u4e8e\u670d\u52a1\u5668<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Apache\u304a\u3088\u3073Fluentd \u2026 172.17.0.2<\/ul>\n<\/li>\n<\/ul>\n<p>Elasticsearch\u304a\u3088\u3073Kibana \u2026 172.17.0.3<\/p>\n<p>\u53ea\u9700\u8981\u4e00\u79cd\u9009\u9879\uff1a<br \/>\n\u5c06\u5176\u8fd0\u884c\u5728\u4e0a\u8ff0\u73af\u5883\u4e2d\u3002<\/p>\n<h1>Apache\u7684\u5b89\u88c5<\/h1>\n<p>\u4e0d\u7ba1\u600e\u6837\uff0c\u9996\u5148\u5b89\u88c5Apache\uff0c\u7136\u540e\u542f\u52a8\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span><span class=\"nb\">sudo <\/span>apt <span class=\"nb\">install <\/span>apache2\r\n<span class=\"nv\">$ <\/span><span class=\"nb\">sudo <\/span>service apache2 start\r\n<\/code><\/pre>\n<p>\u5df2\u5b89\u88c5\u7684Apache\u7248\u672c\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>\/usr\/sbin\/apache2 <span class=\"nt\">-v<\/span>       \r\nServer version: Apache\/2.4.29 <span class=\"o\">(<\/span>Ubuntu<span class=\"o\">)<\/span>\r\nServer built:   2018-10-10T18:59:25\r\n<\/code><\/pre>\n<p>\u56e0\u4e3a\u6ca1\u6709\u8981\u663e\u793a\u7684\u5185\u5bb9\uff0c\u6240\u4ee5\u6682\u65f6\u628aApache\u7684\u6587\u6863\u52a0\u5165\u8fdb\u6765\u8bd5\u8bd5\u770b\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span><span class=\"nb\">cd<\/span> \/var\/www\/html\r\n<span class=\"nv\">$ <\/span><span class=\"nb\">sudo<\/span> <span class=\"nt\">-E<\/span> wget https:\/\/archive.apache.org\/dist\/httpd\/docs\/httpd-docs-2.4.33.ja.zip\r\n<span class=\"nv\">$ <\/span><span class=\"nb\">sudo <\/span>unzip httpd-docs-2.4.33.ja.zip\r\n<span class=\"nv\">$ <\/span><span class=\"nb\">sudo mv <\/span>httpd-docs-2.4.33.ja\/<span class=\"k\">*<\/span> .\/.\r\n<\/code><\/pre>\n<p>\u9009\u62e9\u7684Apache\u7248\u672c\u6bd4\u7528apt\u5b89\u88c5\u7684\u7248\u672c\u7a0d\u5fae\u65b0\u4e00\u70b9\uff0c\u4f46\u662f&#8230;\u3002<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d460f37434c4406ca4249\/19-0.png\" alt=\"\u7bc4\u56f2\u3092\u9078\u629e_001.png\" \/><\/div>\n<p>\u67e5\u770b\u8bbf\u95ee\u65e5\u5fd7\uff0c\u4ee5tail\u547d\u4ee4\u4e3a\u76ee\u6807\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span><span class=\"nb\">sudo tail<\/span> <span class=\"nt\">-f<\/span> \/var\/log\/apache2\/access.log\r\n172.17.0.1 - - <span class=\"o\">[<\/span>11\/Dec\/2018:11:52:14 +0000] <span class=\"s2\">\"GET \/getting-started.html HTTP\/1.1\"<\/span> 200 4746 <span class=\"s2\">\"http:\/\/172.17.0.2\/\"<\/span> <span class=\"s2\">\"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/71.0.3578.80 Safari\/537.36\"<\/span>\r\n172.17.0.1 - - <span class=\"o\">[<\/span>11\/Dec\/2018:11:52:16 +0000] <span class=\"s2\">\"GET \/filter.html HTTP\/1.1\"<\/span> 200 2425 <span class=\"s2\">\"http:\/\/172.17.0.2\/\"<\/span> <span class=\"s2\">\"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/71.0.3578.80 Safari\/537.36\"<\/span>\r\n172.17.0.1 - - <span class=\"o\">[<\/span>11\/Dec\/2018:11:52:51 +0000] <span class=\"s2\">\"GET \/misc\/security_tips.html HTTP\/1.1\"<\/span> 200 7814 <span class=\"s2\">\"http:\/\/172.17.0.2\/\"<\/span> <span class=\"s2\">\"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/71.0.3578.80 Safari\/537.36\"<\/span>\r\n172.17.0.1 - - <span class=\"o\">[<\/span>11\/Dec\/2018:11:52:53 +0000] <span class=\"s2\">\"GET \/server-wide.html HTTP\/1.1\"<\/span> 200 3075 <span class=\"s2\">\"http:\/\/172.17.0.2\/\"<\/span> <span class=\"s2\">\"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/71.0.3578.80 Safari\/537.36\"<\/span>\r\n172.17.0.1 - - <span class=\"o\">[<\/span>11\/Dec\/2018:11:53:01 +0000] <span class=\"s2\">\"GET \/vhosts\/index.html HTTP\/1.1\"<\/span> 200 2839 <span class=\"s2\">\"http:\/\/172.17.0.2\/\"<\/span> <span class=\"s2\">\"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/71.0.3578.80 Safari\/537.36\"<\/span>\r\n172.17.0.1 - - <span class=\"o\">[<\/span>11\/Dec\/2018:11:53:02 +0000] <span class=\"s2\">\"GET \/vhosts\/index.html HTTP\/1.1\"<\/span> 200 2838 <span class=\"s2\">\"http:\/\/172.17.0.2\/\"<\/span> <span class=\"s2\">\"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/71.0.3578.80 Safari\/537.36\"<\/span>\r\n172.17.0.1 - - <span class=\"o\">[<\/span>11\/Dec\/2018:11:53:03 +0000] <span class=\"s2\">\"GET \/vhosts\/fd-limits.html HTTP\/1.1\"<\/span> 200 3281 <span class=\"s2\">\"http:\/\/172.17.0.2\/vhosts\/index.html\"<\/span> <span class=\"s2\">\"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/71.0.3578.80 Safari\/537.36\"<\/span>\r\n<\/code><\/pre>\n<h1>\u5b89\u88c5Fluentd<\/h1>\n<p>\u63a5\u4e0b\u6765\uff0c\u5b89\u88c5Fluentd\u3002<\/p>\n<p>\u8bf7\u53c2\u8003\u8fd9\u91cc\u5e76\u6267\u884c\u3002<\/p>\n<p>\u4f7f\u7528 DEB \u8f6f\u4ef6\u5305\u5b89\u88c5 Fluentd<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>curl <span class=\"nt\">-L<\/span> https:\/\/toolbelt.treasuredata.com\/sh\/install-ubuntu-bionic-td-agent3.sh | sh\r\n<\/code><\/pre>\n<p>\u5f00\u59cb\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span><span class=\"nb\">sudo <\/span>service td-agent start\r\n<\/code><\/pre>\n<p>\u6211\u4eec\u7a0d\u540e\u6765\u8fdb\u884c\u8bbe\u7f6e\u5427\u3002<\/p>\n<h1>\u5b89\u88c5Elasticsearch\u548cKibana<\/h1>\n<p>\u63a5\u4e0b\u6765\uff0c\u5b89\u88c5\u5e76\u542f\u52a8Elasticsearch\u548cKibana\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>wget https:\/\/artifacts.elastic.co\/downloads\/elasticsearch\/elasticsearch-6.5.2.tar.gz\r\n<span class=\"nv\">$ <\/span><span class=\"nb\">tar <\/span>xf elasticsearch-6.5.2.tar.gz\r\n<span class=\"nv\">$ <\/span><span class=\"nb\">cd <\/span>elasticsearch-6.5.2\r\n<span class=\"nv\">$ <\/span>vim config\/elasticsearch.yml     <span class=\"c\"># \u8a2d\u5b9a\u5909\u66f4<\/span>\r\n<span class=\"nv\">$ <\/span>bin\/elasticsearch\r\n<\/code><\/pre>\n<p>\u8a2d\u7f6e\u57fa\u672c\u4e0a\u662f\u9ed8\u8a8d\u7684\uff0c\u4f46\u5141\u8a31\u5916\u90e8\u7db2\u7d61\u8a2a\u554f\uff0c\u4e26\u9032\u884c\u55ae\u7bc0\u9ede\u8a2d\u7f6e\u3002<\/p>\n<p>\u914d\u7f6e\u6587\u4ef6\/elasticsearch.yml<\/p>\n<pre class=\"post-pre\"><code><span class=\"s\">network.host<\/span><span class=\"pi\">:<\/span> <span class=\"s\">0.0.0.0<\/span>\r\n<span class=\"s\">discovery.type<\/span><span class=\"pi\">:<\/span> <span class=\"s2\">\"<\/span><span class=\"s\">single-node\"<\/span>\r\n<\/code><\/pre>\n<p>\u63a5\u4e0b\u6765\uff0c\u5b89\u88c5\u548c\u542f\u52a8Kibana\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>wget https:\/\/artifacts.elastic.co\/downloads\/kibana\/kibana-6.5.2-linux-x86_64.tar.gz\r\n<span class=\"nv\">$ <\/span><span class=\"nb\">tar <\/span>xf kibana-6.5.2-linux-x86_64.tar.gz\r\n<span class=\"nv\">$ <\/span><span class=\"nb\">cd <\/span>kibana-6.5.2-linux-x86_64\r\n<span class=\"nv\">$ <\/span>vim config\/kibana.yml      <span class=\"c\"># \u8a2d\u5b9a\u5909\u66f4<\/span>\r\n<span class=\"nv\">$ <\/span>bin\/kibana\r\n<\/code><\/pre>\n<p>\u628a Kibana \u8bbe\u7f6e\u4e3a\u53ef\u4ee5\u4ece\u5916\u90e8\u8bbf\u95ee\u3002<\/p>\n<p>Kibana\u914d\u7f6e\u6587\u4ef6\u662fconfig\/kibana.yml\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"s\">server.host<\/span><span class=\"pi\">:<\/span> <span class=\"s2\">\"<\/span><span class=\"s\">0.0.0.0\"<\/span>\r\n<\/code><\/pre>\n<h1>\u8fdb\u884cFluentd\u7684\u914d\u7f6e<\/h1>\n<p>\u90a3\u4e48\uff0c\u8ba9\u6211\u4eec\u6765\u8bbe\u7f6eFluentd\u3002<\/p>\n<p>\u6211\u4eec\u5c06\u914d\u7f6eApache\u7684\u8bbf\u95ee\u65e5\u5fd7\u53d1\u9001\u5230Elasticsearch\u3002<\/p>\n<p>\u9996\u5148\uff0cApache\u5b89\u88c5\u540e\u7684\u9ed8\u8ba4\u65e5\u5fd7\u6587\u4ef6\u6743\u9650\u65e0\u6cd5\u88abFluentd\u8bfb\u53d6\uff0c\u56e0\u6b64\u9700\u8981\u66f4\u6539\u6743\u9650&#8230;\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span><span class=\"nb\">sudo chmod <\/span>o+rx \/var\/log\/apache2\r\n<span class=\"nv\">$ <\/span><span class=\"nb\">sudo chmod <\/span>o+r \/var\/log\/apache2\/<span class=\"k\">*<\/span>\r\n<\/code><\/pre>\n<p>\u73b0\u5728\u5f00\u59cb\u5bf9Fluentd\u8fdb\u884c\u914d\u7f6e\u3002\u51e0\u4e4e\u6309\u7167\u6587\u6863\u7684\u6307\u5f15\uff0c\u6211\u4eec\u5c06\u914d\u7f6etail\u8f93\u5165\u63d2\u4ef6\u548cElasticsearch\u8f93\u51fa\u63d2\u4ef6\u3002<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">tail Input Plugin<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">Elasticsearch Output Plugin<\/ul>\n<p>\/etc\/td-agent\/td-agent.conf \u53ef\u4ee5\u88ab\u6539\u5199\u4e3a\uff1a<br \/>\n\/\u7b49\/td-agent\/td-agent.conf<\/p>\n<pre class=\"post-pre\"><code>&lt;source&gt;\r\n  @type tail\r\n  path \/var\/log\/apache2\/access.log\r\n  pos_file \/var\/log\/td-agent\/apache2-access.log.pos\r\n  tag apache2.access\r\n  format apache2\r\n&lt;\/source&gt;\r\n\r\n&lt;match apache2.access&gt;\r\n  @type elasticsearch\r\n  host 172.17.0.3\r\n  port 9200\r\n  logstash_format true\r\n&lt;\/match&gt;\r\n<\/code><\/pre>\n<p>Apache\u8bbf\u95ee\u65e5\u5fd7\u7684\u8bfb\u53d6\u914d\u7f6e\u5728\u8fd9\u91cc\uff0c\u5b83\u4f1atail\u6587\u4ef6\/var\/log\/apache2\/access.log\u5e76\u5c06\u8bfb\u53d6\u4f4d\u7f6e\u4fdd\u5b58\u5230\/var\/log\/td-agent\/apache2-access.log.pos\uff0c\u6587\u4ef6\u683c\u5f0f\u8bbe\u7f6e\u4e3aapache2\u3002<\/p>\n<pre class=\"post-pre\"><code>&lt;source&gt;\r\n  @type tail\r\n  path \/var\/log\/apache2\/access.log\r\n  pos_file \/var\/log\/td-agent\/apache2-access.log.pos\r\n  tag apache2.access\r\n  format apache2\r\n&lt;\/source&gt;\r\n<\/code><\/pre>\n<p>Apache\u7684\u8bbf\u95ee\u65e5\u5fd7\u7684\u89e3\u6790\u4f5c\u4e3a\u63d2\u4ef6\u63d0\u4f9b\u662f\u5f88\u597d\u7684\u9009\u9879\u3002<\/p>\n<p>apache2\u89e3\u6790\u5668\u63d2\u4ef6<\/p>\n<p>\u8bfb\u5165\u7684\u5185\u5bb9\u5c06\u88ab\u9644\u52a0\u6807\u7b7e\u201capache2.access\u201d\u3002<\/p>\n<p>\u5f53\u5339\u914d\u5230\u6807\u7b7e&#8221;apache2.access&#8221;\u65f6\uff0c\u5c06\u8bbe\u7f6e\u8f93\u51fa\u63d2\u4ef6\u5c06\u6570\u636e\u53d1\u9001\u5230Elasticsearch\u3002<\/p>\n<pre class=\"post-pre\"><code>&lt;match apache2.access&gt;\r\n  @type elasticsearch\r\n  host 172.17.0.3\r\n  port 9200\r\n  logstash_format true\r\n&lt;\/match&gt;\r\n<\/code><\/pre>\n<p>Elasticsearch\u8f93\u51fa\u63d2\u4ef6<\/p>\n<p>\u8fde\u63a5\u5bf9\u8c61\u548c\u7aef\u53e3\u4fdd\u6301\u4e0d\u53d8\uff0c\u4f46\u662f&#8221;logstash_format&#8221;\u6307\u7684\u662f\u5728\u5bfc\u5165\u65f6\u5c06Elasticsearch\u7684\u7d22\u5f15\u540d\u79f0\u8bbe\u7f6e\u4e3a&#8221;logstash-%Y.%m.%d&#8221;\uff08\u5982\u679c\u8bbe\u7f6e\u4e3atrue\uff0c\u5219\u7d22\u5f15\u540d\u79f0\u5c06\u4e3a&#8221;logstash-%Y.%m.%d&#8221;\uff09\u3002<\/p>\n<p>Fluentd\u4f7f\u7528\u63d2\u4ef6\u8fdb\u884c\u6570\u636e\u7684\u63d0\u53d6\u3001\u89e3\u6790\u3001\u8f6c\u6362\u548c\u8f93\u51fa\u3002<\/p>\n<p>\u8bf7\u67e5\u9605\u6587\u6863\u4ee5\u4e86\u89e3\u6709\u54ea\u4e9b\u63d2\u4ef6\u53ef\u7528\u3002<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Input Plugins<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Output Plugins<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Filter Plugins<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Parser Plugins<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Formatter Plugins<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Buffer Plugins<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">Storage Plugins<\/ul>\n<p>\u8bbe\u5b9a\u5b8c\u4e0a\u8ff0\u5185\u5bb9\u540e\uff0c\u91cd\u65b0\u542f\u52a8Fluentd\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span><span class=\"nb\">sudo <\/span>service td-agent restart\r\n<\/code><\/pre>\n<p>\u8bbf\u95eeApache\u4e0a\u516c\u5f00\u7684\u5185\u5bb9\u65f6\uff0c<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d460f37434c4406ca4249\/65-0.png\" alt=\"\u7bc4\u56f2\u3092\u9078\u629e_005.png\" \/><\/div>\n<p>\u804c\u4f4d\u6587\u4ef6\u5c06\u88ab\u6301\u7eed\u66f4\u65b0\u3002<\/p>\n<pre class=\"post-pre\"><code>\/var\/log\/td-agent\/apache2-access.log.pos \r\n\/var\/log\/apache2\/access.log 000000000000122b    000000000024981e\r\n<\/code><\/pre>\n<p>\u7136\u540e\uff0c\u6570\u636e\u5c06\u4f1a\u8fdb\u5165Elasticsearch\uff0c\u63a5\u7740\u6211\u4eec\u9700\u8981\u5728Kibana\u4e2d\u8fdb\u884cDiscovery\u7684\u8bbe\u7f6e\u3002\u5982\u679c\u6210\u529f\u8bbe\u7f6e\u6570\u636e\u8fdb\u5165\uff0c\u63a5\u4e0b\u6765\u4f1a\u751f\u6210\u8bbf\u95ee\u65e5\u5fd7\u5e76\u4e14\u5f88\u5feb\u4f1a\u53d8\u4e3a\u53ef\u4f9b\u53c2\u8003\u7684logstash-\u301c\u7d22\u5f15\u3002<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d460f37434c4406ca4249\/69-0.png\" alt=\"\u7bc4\u56f2\u3092\u9078\u629e_002.png\" \/><\/div>\n<p>\u9664\u6b64\u4e4b\u5916\uff0c\u53ea\u9700\u8981\u5c06\u5176\u6ce8\u518c\u3002<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d460f37434c4406ca4249\/71-0.png\" alt=\"\u7bc4\u56f2\u3092\u9078\u629e_003.png\" \/><\/div>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d460f37434c4406ca4249\/72-0.png\" alt=\"\u7bc4\u56f2\u3092\u9078\u629e_004.png\" \/><\/div>\n<p>\u53ea\u8981\u80fd\u591f\u53c2\u8003\uff0c\u5c31\u53ef\u4ee5\u4e86\u3002<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d460f37434c4406ca4249\/74-0.png\" alt=\"\u7bc4\u56f2\u3092\u9078\u629e_006.png\" \/><\/div>\n<p>\u4ece\u8fd9\u91cc\u5f00\u59cb\uff0c\u8ba9\u6211\u4eec\u7528Kibana\u6839\u636e\u81ea\u5df1\u7684\u559c\u597d\u8fdb\u884c\u53ef\u89c6\u5316\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u6211\u60f3\u505a\u7684\u4e8b\u60c5 (Wo xiang zuo de shiqing) Apache\u306e\u30a2\u30af\u30bb\u30b9\u30ed\u30b0\u3092\u3001\u53ef\u8996\u5316\u30fb\u5206\u6790\u3059 [&hellip;]<\/p>\n","protected":false},"author":9,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-41349","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.5 (Yoast SEO v21.5) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u4f7f\u7528Fluentd\u76d1\u63a7Apache\u7684\u8bbf\u95ee\u65e5\u5fd7\uff0c\u5e76\u5c06\u5176\u4f20\u8f93\u5230Elasticsearch - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528fluentd\u76d1\u63a7apache\u7684\u8bbf\u95ee\u65e5\u5fd7\uff0c\u5e76\u5c06\u5176\u4f20\u8f93\u5230elasticsearch\u3002\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u4f7f\u7528Fluentd\u76d1\u63a7Apache\u7684\u8bbf\u95ee\u65e5\u5fd7\uff0c\u5e76\u5c06\u5176\u4f20\u8f93\u5230Elasticsearch\" \/>\n<meta property=\"og:description\" content=\"\u6211\u60f3\u505a\u7684\u4e8b\u60c5 (Wo xiang zuo de shiqing) Apache\u306e\u30a2\u30af\u30bb\u30b9\u30ed\u30b0\u3092\u3001\u53ef\u8996\u5316\u30fb\u5206\u6790\u3059 [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528fluentd\u76d1\u63a7apache\u7684\u8bbf\u95ee\u65e5\u5fd7\uff0c\u5e76\u5c06\u5176\u4f20\u8f93\u5230elasticsearch\u3002\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2022-12-10T00:39:46+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-28T17:52:33+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d460f37434c4406ca4249\/19-0.png\" \/>\n<meta name=\"author\" content=\"\u6e05, \u626c\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u6e05, \u626c\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8fluentd%e7%9b%91%e6%8e%a7apache%e7%9a%84%e8%ae%bf%e9%97%ae%e6%97%a5%e5%bf%97%ef%bc%8c%e5%b9%b6%e5%b0%86%e5%85%b6%e4%bc%a0%e8%be%93%e5%88%b0elasticsearch%e3%80%82\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8fluentd%e7%9b%91%e6%8e%a7apache%e7%9a%84%e8%ae%bf%e9%97%ae%e6%97%a5%e5%bf%97%ef%bc%8c%e5%b9%b6%e5%b0%86%e5%85%b6%e4%bc%a0%e8%be%93%e5%88%b0elasticsearch%e3%80%82\/\",\"name\":\"\u4f7f\u7528Fluentd\u76d1\u63a7Apache\u7684\u8bbf\u95ee\u65e5\u5fd7\uff0c\u5e76\u5c06\u5176\u4f20\u8f93\u5230Elasticsearch - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2022-12-10T00:39:46+00:00\",\"dateModified\":\"2024-04-28T17:52:33+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8fluentd%e7%9b%91%e6%8e%a7apache%e7%9a%84%e8%ae%bf%e9%97%ae%e6%97%a5%e5%bf%97%ef%bc%8c%e5%b9%b6%e5%b0%86%e5%85%b6%e4%bc%a0%e8%be%93%e5%88%b0elasticsearch%e3%80%82\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8fluentd%e7%9b%91%e6%8e%a7apache%e7%9a%84%e8%ae%bf%e9%97%ae%e6%97%a5%e5%bf%97%ef%bc%8c%e5%b9%b6%e5%b0%86%e5%85%b6%e4%bc%a0%e8%be%93%e5%88%b0elasticsearch%e3%80%82\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8fluentd%e7%9b%91%e6%8e%a7apache%e7%9a%84%e8%ae%bf%e9%97%ae%e6%97%a5%e5%bf%97%ef%bc%8c%e5%b9%b6%e5%b0%86%e5%85%b6%e4%bc%a0%e8%be%93%e5%88%b0elasticsearch%e3%80%82\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u4f7f\u7528Fluentd\u76d1\u63a7Apache\u7684\u8bbf\u95ee\u65e5\u5fd7\uff0c\u5e76\u5c06\u5176\u4f20\u8f93\u5230Elasticsearch\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461\",\"name\":\"\u6e05, \u626c\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g\",\"caption\":\"\u6e05, \u626c\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/qingyang\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8fluentd%e7%9b%91%e6%8e%a7apache%e7%9a%84%e8%ae%bf%e9%97%ae%e6%97%a5%e5%bf%97%ef%bc%8c%e5%b9%b6%e5%b0%86%e5%85%b6%e4%bc%a0%e8%be%93%e5%88%b0elasticsearch%e3%80%82\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u4f7f\u7528Fluentd\u76d1\u63a7Apache\u7684\u8bbf\u95ee\u65e5\u5fd7\uff0c\u5e76\u5c06\u5176\u4f20\u8f93\u5230Elasticsearch - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528fluentd\u76d1\u63a7apache\u7684\u8bbf\u95ee\u65e5\u5fd7\uff0c\u5e76\u5c06\u5176\u4f20\u8f93\u5230elasticsearch\u3002\/","og_locale":"zh_CN","og_type":"article","og_title":"\u4f7f\u7528Fluentd\u76d1\u63a7Apache\u7684\u8bbf\u95ee\u65e5\u5fd7\uff0c\u5e76\u5c06\u5176\u4f20\u8f93\u5230Elasticsearch","og_description":"\u6211\u60f3\u505a\u7684\u4e8b\u60c5 (Wo xiang zuo de shiqing) Apache\u306e\u30a2\u30af\u30bb\u30b9\u30ed\u30b0\u3092\u3001\u53ef\u8996\u5316\u30fb\u5206\u6790\u3059 [&hellip;]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528fluentd\u76d1\u63a7apache\u7684\u8bbf\u95ee\u65e5\u5fd7\uff0c\u5e76\u5c06\u5176\u4f20\u8f93\u5230elasticsearch\u3002\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2022-12-10T00:39:46+00:00","article_modified_time":"2024-04-28T17:52:33+00:00","og_image":[{"url":"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d460f37434c4406ca4249\/19-0.png"}],"author":"\u6e05, \u626c","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u6e05, \u626c","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"3 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8fluentd%e7%9b%91%e6%8e%a7apache%e7%9a%84%e8%ae%bf%e9%97%ae%e6%97%a5%e5%bf%97%ef%bc%8c%e5%b9%b6%e5%b0%86%e5%85%b6%e4%bc%a0%e8%be%93%e5%88%b0elasticsearch%e3%80%82\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8fluentd%e7%9b%91%e6%8e%a7apache%e7%9a%84%e8%ae%bf%e9%97%ae%e6%97%a5%e5%bf%97%ef%bc%8c%e5%b9%b6%e5%b0%86%e5%85%b6%e4%bc%a0%e8%be%93%e5%88%b0elasticsearch%e3%80%82\/","name":"\u4f7f\u7528Fluentd\u76d1\u63a7Apache\u7684\u8bbf\u95ee\u65e5\u5fd7\uff0c\u5e76\u5c06\u5176\u4f20\u8f93\u5230Elasticsearch - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2022-12-10T00:39:46+00:00","dateModified":"2024-04-28T17:52:33+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8fluentd%e7%9b%91%e6%8e%a7apache%e7%9a%84%e8%ae%bf%e9%97%ae%e6%97%a5%e5%bf%97%ef%bc%8c%e5%b9%b6%e5%b0%86%e5%85%b6%e4%bc%a0%e8%be%93%e5%88%b0elasticsearch%e3%80%82\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8fluentd%e7%9b%91%e6%8e%a7apache%e7%9a%84%e8%ae%bf%e9%97%ae%e6%97%a5%e5%bf%97%ef%bc%8c%e5%b9%b6%e5%b0%86%e5%85%b6%e4%bc%a0%e8%be%93%e5%88%b0elasticsearch%e3%80%82\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8fluentd%e7%9b%91%e6%8e%a7apache%e7%9a%84%e8%ae%bf%e9%97%ae%e6%97%a5%e5%bf%97%ef%bc%8c%e5%b9%b6%e5%b0%86%e5%85%b6%e4%bc%a0%e8%be%93%e5%88%b0elasticsearch%e3%80%82\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u4f7f\u7528Fluentd\u76d1\u63a7Apache\u7684\u8bbf\u95ee\u65e5\u5fd7\uff0c\u5e76\u5c06\u5176\u4f20\u8f93\u5230Elasticsearch"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461","name":"\u6e05, \u626c","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g","caption":"\u6e05, \u626c"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/qingyang\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8fluentd%e7%9b%91%e6%8e%a7apache%e7%9a%84%e8%ae%bf%e9%97%ae%e6%97%a5%e5%bf%97%ef%bc%8c%e5%b9%b6%e5%b0%86%e5%85%b6%e4%bc%a0%e8%be%93%e5%88%b0elasticsearch%e3%80%82\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/41349","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=41349"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/41349\/revisions"}],"predecessor-version":[{"id":73037,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/41349\/revisions\/73037"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=41349"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=41349"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=41349"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}