在安装完成Logstash、Sqlite3和Sqlite input plugin 插件后,可以进一步操作。
1、建立一个SQlite数据库文件
新建一个example.db文件;
编辑此文件,/home/bigdata/data/example.db是文件的全路径:
sqlite3 /home/example.db;
新建一张表:
CREATE TABLE weblogs (id INTEGER PRIMARY KEY AUTOINCREMENT,ip STRING,request STRING,response INTEGER);
在表内插入数据:
INSERT INTO weblogs (ip, request, response) VALUES ("1.2.3.4", "/index.html", 200);
此时,查找表内数据,发现已经有结果了:
select * from weblogs;
2、配置Logstash参数
在Logstash的conf文件夹下,新建一个sqlite.conf 文件,其内容为:
input {
sqlite {
path => "/home/bigdata/data/example.db"
type => weblogs
}
}
output {
stdout {
codec => rubydebug
}
}
3、启动Logstash,其执行结果如下:
[[email protected] conf]$ ../bin/logstash -f sqlite.conf
Logstash startup completed
{
"host" => "master",
"db" => #<Sequel::JDBC::Database: "jdbc:sqlite:/home/bigdata/data/example.db">,
"@version" => "1",
"@timestamp" => "2017-10-26T12:24:43.556Z",
"type" => "weblogs",
"ip" => "1.2.3.4",
"request" => "/index.html",
"response" => 200
}
参考:https://www.elastic.co/guide/en/logstash/current/plugins-inputs-sqlite.html