Skip to content

Instantly share code, notes, and snippets.

View vidyasonawane's full-sized avatar
😃
Seize the Day.!

Vidya Sonawane vidyasonawane

😃
Seize the Day.!
  • Philips
  • Bangalore, India
View GitHub Profile
syntax = "proto3";
message MyMessage {
int32 id = 1;
string first_name = 2;
bool is_validated = 3;
}
Other servers
###################### Filebeat Configuration Example #########################
# This file is an example configuration file highlighting only the most common
# options. The filebeat.reference.yml file from the same directory contains all the
# supported options with more comments. You can use it as a reference.
#
# You can find the full configuration reference here:
###################### Filebeat Configuration Example #########################
# This file is an example configuration file highlighting only the most common
# options. The filebeat.reference.yml file from the same directory contains all the
# supported options with more comments. You can use it as a reference.
#
# You can find the full configuration reference here:
# https://www.elastic.co/guide/en/beats/filebeat/index.html
# For more available modules and options, please see the filebeat.reference.yml sample
filebeat.inputs:
- type: log
enabled: true
paths:
#- /var/log/*.log
#- c:\programdata\elasticsearch\logs\*
actions:
1:
action: delete_indices
description: >-
Delete indices older than 7 days (based on index name), for filebeat-
prefixed indices. Ignore the error if the filter does not result in an
actionable list of indices (ignore_empty_list) and exit cleanly.
options:
ignore_empty_list: True
disable_action: False
client:
hosts:
- 127.0.0.1
port: 9200
url_prefix:
use_ssl: False
certificate:
client_cert:
client_key:
ssl_no_validate: False
/var/log/nginx/*.log {
weekly
missingok
rotate 52
compress
delaycompress
notifempty
}
input {
beats {
port => "5044"
}
}
filter {
grok {
match => { "message" => "%{IP:client_address1}, %{IP:client_address2}, %{IP:client_address3} %{NOTSPACE:user1} %{NOTSPACE:user2} \[%{NOTSPACE:datetime} \+0000\] \"%{WORD:request_type} %{NOTSPACE:url} %{NOTSPACE:protocol}\" %{NUMBER:status_code} - %{NUMBER:milliseconds} \ms \"%{NOTSPACE:healthchecker1}\" \"%{NOTSPACE:healthchecker2}\""}
}
}
input {
beats {
port => "5044"
}
}
filebeat.prospectors:
- type: log
paths:
- /home/ubuntu/aggregation-service.logs
output.logstash:
hosts: ["localhost:5044"]