filebeat.inputs:

# Each - is an input. Most options can be set at the input level, so
# you can use different inputs for various configurations.
# Below are the input specific configurations.

- type: log

  # Change to true to enable this input configuration.
  enabled: true       # 这里要开启，否则没有日志输出

  # Paths that should be crawled and fetched. Glob based paths.
  paths:
      /var/log/secure    #定义收集日志文件，
  
  
  
 # 注意这里的配置  格式非常重要。
  output.elasticsearch:
  # Array of hosts to connect to.
    hosts: ["172.16.96.21:9200"]


  # Authentication credentials - either API key or username/password.
      username: "elastic"
      password: "youpassword"
      index: "nginx-%{+yyyy.MM.dd}"    #这个索引名一定是跟在output下面里边，不要写错。
  # setup.template.name: "default@template"      # 下面三项 这里一定要顶格写，否则报错。
  # setup.template.pattern: "nginx-*"
  # setup.ilm.enabled: false