本文參考：https://www.cnblogs.com/yanshicheng/articles/9436373.html
https://www.cnblogs.com/fawaikuangtu123/articles/10360264.html
1.logstash安裝（jdk提前安裝1.8）
rpm -ivh logstash-6.6.2.rpm
2.上傳數據庫驅動jar包
wget https://dev.mysql.com/get/Downloads/Connector-J/mysql-connector-java-5.1.48.tar.gz
mkdir -p /usr/share/logstash/vendor/jar/jdbc cd /usr/share/logstash/vendor/jar/jdbc [root@localhost soft]# cd /usr/share/logstash/vendor/jar/jdbc [root@localhost jdbc]# ll total 984 -rw-r--r--. 1 logstash logstash 1006959 Jul 11 19:43 mysql-connector-java-5.1.48-bin.jar [root@localhost jdbc]#
3.數據庫創建庫 並授權用戶
create database nginxlog; use nginxlog; CREATE TABLE `consumerlog` ( `client_ip` varchar(128) DEFAULT NULL, `log_time` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP, `status` int(6) DEFAULT NULL, `http_referer` text, `AgentVersion` varchar(512) DEFAULT NULL, ) grant all on nginxlog.* to nginxlog@'%' identified by '123456';
4.安裝 logstash-output-jdbc插件
vim /usr/share/logstash/Gemfile # source "https://rubygems.org" 將國外的源註釋,換成國內的 source "https://gems.ruby-china.com/"
/usr/share/logstash/bin/logstash-plugin install logstash-output-jdbc Validating logstash-output-jdbc Installing logstash-output-jdbc Installation successful /usr/share/logstash/bin/logstash-plugin list | grep jdbc logstash-input-jdbc logstash-output-jdbc
5.nginx日誌格式設置
log_format access_log_json '{"client_ip":"$remote_addr","log_time":"$time_local","request":"$request","status":"$status","body_bytes_sent":"$body_bytes_sent","http_referer":"$http_referer","AgentVersion":"$http_user_agent","upstream_addr":"$upstream_addr","request_time":"$request_time","upstream_response_time":"$upstream_response_time"}';6.
[root@localhost conf.d]# cat consumer_log.conf
/etc/logstash/conf.d
input{
file{
path => "/usr/local/tengine-2.1.2/logs/sxt-consumer.log"
start_position => "beginning"
stat_interval => "2"
codec => "json"
}
}
filter {
if [status] != "200" {
drop{}
}
}
output{
jdbc{
connection_string => "jdbc:mysql://192.168.14.61/nginxlog?user=nginxlog&password=123456&useUnicode=true&characterEncoding=UTF8"
statement => ["insert into consumerlog(client_ip,status,http_referer,AgentVersion) VALUES(?,?,?,?)", "client_ip","status","http_referer","AgentVersion"]
}
}7.啓動logstash
systemctl start logstash
8.驗證數據
