我正在尝试将所有 AWS ECS 日志转发到 Logstash。检查了一些文档,我只找到了定义特定 Cloudwatch 日志组的方法:
input {
cloudwatch_logs {
log_group => ["/aws/ecs/a","/aws/ecs/b","/aws/ecs/c","/aws/ecs/d","/aws/ecs/e","/aws/ecs/f"]
start_position => "end"
access_key_id => "<access_key>"
secret_access_key => "<secret_access_key>"
region => "eu-west-2"
tags => ["cloudwatch_syslog"]
}
}
有没有办法转发“/aws/ecs/*”中的所有日志?
可能有其他好的解决方案吗?