1，logstash安装zabbix插件
./logstash-plugin install logstash-output-zabbix
2，编写logstash 的启动文件
[root@zabbix-agent ~]#
[root@zabbix-agent ~]# cat /root/logstash/b.conf
input {
file {
path => "/home/elk/test.log"
start_position => "beginning"
add_field => [ "[@metadata][zabbix_key]" , "key.log.error" ]
add_field => [ "[@metadata][zabbix_host]" , "pwcc" ]
}
}
output {
stdout { codec => rubydebug }
zabbix {
zabbix_host => "[@metadata][zabbix_host]"
zabbix_key => "[@metadata][zabbix_key]"
zabbix_server_host => "192.168.0.11"
zabbix_server_port => "10051"
zabbix_value => "message"
}
}
[root@zabbix-agent ~]#
[root@zabbix-agent ~]#
3，配置zabbix-web-ui
配置host
配置监控项item
最后配置触发器
4，启动logstash测试
[root@zabbix-agent elk]# echo "test1" >>test.log [root@zabbix-agent elk]# echo "test2" >>test.log [root@zabbix-agent elk]# [root@zabbix-agent elk]# echo "test3" >>test.log [root@zabbix-agent elk]# echo "test4" >>test.log
6，触发发生告警
