
1 收集nginx日志1.1 配置logstashcat logstash.conf
input {
beats {
port => 5044
codec => json
}
}
filter {
geoip {
target => "geoip"
source => "realip"
add_field => [ "[geoip][coordinates]", "%{[geoip][longitude]}" ]
add_field => [ "[geoip][coordinates]", "%{[geoip][latitude]}" ]
}
mutate {
convert => ["[geoip][coordinates]","float"]
convert => [ "visit_host","string" ]
convert => [ "status","inte ...




