#${logstash_dir}/config/apps_pending.conf.template
#攝取、轉換、充實和輸出 yarn.resourcemanager.webapp.address 頁面 Applications ACCEPTED 資料 Logstash 配置檔案模闆
input {
file { path => "${logstash_input_file}" }
}
filter {
grok {
match => { "message" => "%{USER:application_id} %{USER:queue} %{USER:user}" }
remove_field => ['message']
}
}
output {
elasticsearch {
hosts => ["${elasticsearch_hosts}"]
index => "${elasticsearch_index}"
}
}