ELK,kibana给定匹配模式会出现另一个索引的数据。

初学elk,搭建了个日志收集的样子,展现数据的时候遇到疑问。

我logstash设置了两个pipeline,rabbitmq和http两个input:

input {
  rabbitmq {
    host => "rabbitmq"
    subscription_retry_interval_seconds => 5
    queue => "hello"
  }
}

# The filter part of this file is commented out to indicate that it
# is optional.
# filter {
#
# }

output {
  elasticsearch {
    hosts => "elasticsearch:9200"
    manage_template => false
    index => "rabbitmq-log-test-%{+YYYY.MM.dd}"
  }
}
input {
  http {
    additional_codecs => {"application/json"=>"json"}
    port => 8080
    threads => 2
  }
}

# The filter part of this file is commented out to indicate that it
# is optional.
# filter {
#
# }

output {
  elasticsearch {
    hosts => "elasticsearch:9200"
    manage_template => false
    index => "http-log-test-%{+YYYY.MM.dd}"
  }
}

rabbit写入数据:{"site":"a", "level":"error", "message": "unknow error", "trace":"sdfsfsf"}
http写入数据:{"site":"b","error":"adsfsdf","trace":"asdsfdsf"}

Elasticsearch的索引
图片描述

Kibana的索引模式:
图片描述

Kibana discover查看页面:
图片描述

我是想问,我kibana的搜索模式没有http-log的数据,为什么在discover的数据列表里面出现了http-log的数据?

阅读 2.2k
撰写回答
你尚未登录,登录后可以
  • 和开发者交流问题的细节
  • 关注并接收问题和回答的更新提醒
  • 参与内容的编辑和改进,让解决方法与时俱进
推荐问题