Logstash 配置文件：将 TCP 日志发送到 Elasticsearch

"input" {\n "tcp" {\n "mode" => "server"\n "host" => "127.0.0.1"\n "port" => 9001\n "codec" => "json_lines"\n }\n}\n\n"output" {\n "elasticsearch" {\n "hosts" => ["http://127.0.0.1:9200"]\n "index" => "elk-search-%{+YYYY.MM.dd}"\n }\n}