一些关键信息

./bin/logstash -f ./conf/logstash-demo.conf –config.reload.automatic**

filebeat -e -c filebeat.yml

具体参考资料

https://blog.csdn.net/cai750415222/article/details/86614854

https://cn.bing.com/search?q=logstash%E5%88%A0%E9%99%A4%E5%AD%97%E6%AE%B5%E7%9A%84%E5%89%8D5%E4%BD%8D

https://blog.csdn.net/weixin_30402343/article/details/99023678

https://blog.csdn.net/xiaoyu_bd/article/details/52531051

https://cn.bing.com/search?q=logstash%E5%B0%86message%E4%B8%AD%E7%9A%84%E6%97%B6%E9%97%B4%E6%88%B3&qs=n&form=QBRE&sp=-1&pq=logstash%E5%B0%86message%E4%B8%AD%E7%9A%84%E6%97%B6%E9%97%B4%E6%88%B3&sc=0-21&sk=&cvid=7E3AB1021D1E458B9E6489AF20547576

https://www.fanyigou.com/doc/toTranslate.htm#zhihuxielunwenbibei

https://www.elastic.co/guide/en/logstash/current/plugins-filters-split.html

https://www.elastic.co/guide/en/logstash/current/plugins-filters-grok.html#plugins-filters-grok-match

https://elasticsearch.cn/question/5322

https://cn.bing.com/search?q=spilt+mutate+add_field&qs=n&form=QBRE&sp=-1&pq=spilt+mutate+add_field&sc=0-22&sk=&cvid=9340ADD8EC57489281311637C12A136D

https://www.elastic.co/guide/en/logstash/current/plugins-filters-mutate.html#plugins-filters-mutate-add_field

https://www.elastic.co/guide/en/logstash/current/filter-plugins.html

https://blog.csdn.net/wyqlxy/article/details/52622867