攝取、轉換、充實和輸出 yarn.resourcemanager.webapp.address 頁面 Applications ACCEPTED 資料 Logstash 配置檔案模闆

#${logstash_dir}/config/apps_pending.conf.template
#攝取、轉換、充實和輸出 yarn.resourcemanager.webapp.address 頁面 Applications ACCEPTED 資料 Logstash 配置檔案模闆

input {
  file { path => "${logstash_input_file}" }
}
filter {
  grok {
    match => { "message" => "%{USER:application_id} %{USER:queue} %{USER:user}" }
    remove_field => ['message']
  }
}
output {
  elasticsearch { 
    hosts => ["${elasticsearch_hosts}"]
    index => "${elasticsearch_index}"
  }
}