Looking to get data out of apache logs into elasticsearch? You can do that with fluentd in 10 minutes!
Here is how:
$ gem install fluentd$ gem install fluent-plugin-elasticsearch$ touch fluentd.conf
fluentd.conf should look like this (just copy and paste this into fluentd.conf):
<source>@type tailpath /var/log/httpd-access.log #...or where you placed your Apache access logpos_file /var/log/td-agent/httpd-access.log.pos # This is where you record file positiontag apache.access #fluentd tag!format apache2 # Do you have a custom format? You can write your own regex.</source><match **>@type elasticsearchlogstash_format truehost <hostname> #(optional; default="localhost")port <port> #(optional; default=9200)index_name <index name> #(optional; default=fluentd)type_name <type name> #(optional; default=fluentd)</match>
After that, you can start fluentd and everything should work:
$ fluentd -c fluentd.conf
Of course, this is just a quick example. If you are thinking of running fluentd in production, consider using td-agent, the enterprise version of Fluentd packaged and maintained by Treasure Data, Inc..
If this article is incorrect or outdated, or omits critical information, please let us know. Fluentd is a open source project under Cloud Native Computing Foundation (CNCF). All components are available under the Apache 2 License.