
常用命令查看进程ps-ef|greplogstash查看端口监听ss-tlnp|grep60000ss-ulnp|grep60000查看实时日志tail-f/data/LogStash/logstash/logstash/logs/logstash-plain.log修改配置热重载无需重启vi/data/LogStash/logstash/logstash/config/logstash.conf# 保存后自动生效观察日志确认重载启动sudo-ulogstashnohup/data/LogStash/logstash/logstash/bin/logstash\-f/data/LogStash/logstash/logstash/config/logstash.conf\--config.reload.automatic/dev/null21停止# 先找到 PIDps-ef|greplogstash# 然后 killkillPID测试数据收发# TCP 测试echotest syslog message|nc127.0.0.160000# UDP 测试echotest syslog message|nc-u127.0.0.160000# 查看是否写入tail-f/data/logs/syslog-$(date%Y-%m-%d).log