windows添加filebeat收集日志

一，下载filebeat

/cn/downloads/past-releases/filebeat-6-5-1

 

二，打开windows，上传压缩包到C盘，解压压缩包

 

三，配置l

- type: log
  enabled: true
  encoding: utf-8
  paths:
    - c:programdataelasticsearchlogs*
  fields:
    logtype: test
    group: test
    server: test10
  fields_under_root: true  
  exclude_lines: ['poll','running','Content-Length']

exclude_lines匹配字符串只能写一条，可以写多个匹配；

exclude_lines第二条匹配只能写正