Logstash接收udp/tcp数据

朴灿烈づ我的快乐病毒、 2023-02-10 01:22 23阅读 0赞

**背景：在 [Logstash数据源为日志文件操作][Logstash] 基础上进行**

### 一、配置文件 ###

**1.** **D:\\usr\\local\\etc\\logstash\\pipeline1目录下logstash.conf文件配置**

input { 
        stdin { } 
        udp {
            host => "0.0.0.0"
            # 从5000端口获取日志
            port => 5000
            type => "udp"
        }
        tcp {
            mode => "server"
            host => "0.0.0.0"
            # 从5044端口取日志
            port => 5000
            # 需要安装logstash-codec-json_lines插件
            codec => json_lines
            type => "tcp"
        }
    }
    
    output {
    	stdout { codec => rubydebug }
        if [type] == "udp" {
            elasticsearch {
                hosts => ["192.168.1.110:9200"]
                index => "logstash-udp-%{+YYYY.MM.dd}"
            }
        }
        if [type] == "tcp" {
            elasticsearch {
                hosts => ["192.168.1.110:9200"]
                index => "logstash-tcp-%{+YYYY.MM.dd}"
            }
        }
        
    }

**2. D:\\usr\\local\\etc\\logstash\\****config目录下logstash.yml文件配置**

http.host: "0.0.0.0"

### 二、启动logstash ###

**1. 执行命令，启动logstash容器(注：此处UDP/TCP数据接收端口为5000)**

docker run -it -v /d/usr/local/etc/logstash/config/logstash.yml:/usr/share/logstash/config/logstash.yml -v /d/usr/local/etc/logstash/pipeline1:/usr/share/logstash/pipeline --name logstash1 -p 9601:9600 -p 5000:5000/udp -p 5000:5000 logstash:7.7.0

### 三、数据发送 ###

**1. 在D:\\usr\\local\\bin\\start目录下创建send\_udp.py文件**

#!/usr/bin/python
    # -*- coding: UTF-8 -*-
    import socket  # 网络通信 TCP，UDP
    
    # SOCK_DGRAM表示UDP，SOCKET_STREAM表示TCP
    client = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
    
    while True:
        msg = input('>>: ').strip()
        if not msg:
            continue
    
        client.sendto(msg.encode('utf-8'), ('192.168.1.110', 5000))
    
        if msg == 'close':
            break
    client.close()

**2. D:\\usr\\local\\bin\\start目录下创建send\_tcp.py文件**

#!/usr/bin/python
    # -*- coding: UTF-8 -*-
    import socket  # 网络通信 TCP，UDP
    
    # SOCK_DGRAM表示UDP，SOCKET_STREAM表示TCP
    host = ('127.0.0.1', 5000)
    client = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    client.connect(host)
    
    while True:
        msg = input('>>: ').strip()
        if not msg:
            continue
    
        client.sendto(msg.encode('utf-8'), host)
    
        if msg == 'close':
            break
    client.close()

**3. 执行udp数据发送脚本，发送数据**

python3 send_udp.py

![20200519172437856.png][]

**4. 执行tcp数据发送脚本，发送数据**

python3 send_tcp.py

![20200519173306197.png][]

### 四、查看结果 ###

**1. udp数据接收结果**

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz_size_16_color_FFFFFF_t_70][]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz_size_16_color_FFFFFF_t_70 1][]

**2. tcp数据接收结果**

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz_size_16_color_FFFFFF_t_70 2][]

**从以上结果可以看出配置成功 **

[Logstash]: https://blog.csdn.net/zsx18273117003/article/details/106116428
[20200519172437856.png]: https://img-blog.csdnimg.cn/20200519172437856.png
[20200519173306197.png]: https://img-blog.csdnimg.cn/20200519173306197.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/2020051917250383.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20200519172911549.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz_size_16_color_FFFFFF_t_70 2]: https://img-blog.csdnimg.cn/20200519173416293.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz,size_16,color_FFFFFF,t_70