{"id":953,"date":"2026-02-12T23:03:46","date_gmt":"2026-02-12T14:03:46","guid":{"rendered":"http:\/\/www.igoni.kr\/?p=953"},"modified":"2026-02-12T23:03:46","modified_gmt":"2026-02-12T14:03:46","slug":"2-elk-config-%ec%a0%95%eb%b3%b4","status":"publish","type":"post","link":"http:\/\/www.igoni.kr\/?p=953","title":{"rendered":"2. ELK Config \uc815\ubcf4"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_82_2 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\ubaa9 \ucc28<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"\ubaa9\ucc28 \ud1a0\uae00\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"http:\/\/www.igoni.kr\/?p=953\/#ELK_Stack_Config_Value_%EC%84%A4%EB%AA%85\" >ELK Stack Config Value \uc124\uba85<\/a><\/li><\/ul><\/nav><\/div>\n<h4 id=\"bkmrk-elk-stack-config-val\"><span class=\"ez-toc-section\" id=\"ELK_Stack_Config_Value_%EC%84%A4%EB%AA%85\"><\/span>ELK Stack Config Value \uc124\uba85<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<ol id=\"bkmrk-filebeat-config-%EC%A0%95%EB%B3%B4-f\">\n<li>Filebeat Config \uc815\ubcf4\n<ol>\n<li>filebeat Log Config \uac12<br \/>\n<table style=\"border-collapse: collapse; width: 100%; border-width: 1px; height: 1159.93px;\" border=\"1\">\n<colgroup>\n<col style=\"width: 24.4859%;\" \/>\n<col style=\"width: 54.0425%;\" \/>\n<col style=\"width: 21.5384%;\" \/><\/colgroup>\n<thead>\n<tr style=\"height: 29.8785px;\">\n<td class=\"align-center\" style=\"height: 29.8785px;\"><strong>\uc124\uc815\uac12<\/strong><\/td>\n<td class=\"align-center\" style=\"height: 29.8785px;\"><strong>\uc124 \uba85<\/strong><\/td>\n<td class=\"align-center\" style=\"height: 29.8785px;\"><strong>\uae30\ubcf8\uac12<\/strong><\/td>\n<\/tr>\n<\/thead>\n<tbody>\n<tr style=\"height: 80.2257px;\">\n<td style=\"height: 80.2257px;\">paths<\/td>\n<td style=\"height: 80.2257px;\">\uc218\uc9d1\ud560 \uacbd\ub85c<\/td>\n<td style=\"height: 80.2257px;\">\u00a0\/var\/log\/message \u2192<\/p>\n<p>\/home\/message<\/p>\n<p>\/var\/log\/secure<\/td>\n<\/tr>\n<tr style=\"height: 35.4688px;\">\n<td style=\"height: 35.4688px;\">recursive_glob. enabled<\/td>\n<td style=\"height: 35.4688px;\">recursive \ud328\ud134\uc73c\ub85c \ud655\uc7a5 \uae30\ub2a5 \ud65c\uc131\ud654<\/td>\n<td style=\"height: 35.4688px;\">true<\/td>\n<\/tr>\n<tr style=\"height: 35.4688px;\">\n<td style=\"height: 35.4688px;\">encoding<\/td>\n<td style=\"height: 35.4688px;\">W3C\uc5d0\uc11c \uc0ac\uc6a9\ud558\ub294 \uc778\ucf54\ub529<\/td>\n<td style=\"height: 35.4688px;\">plain<\/td>\n<\/tr>\n<tr style=\"height: 35.4688px;\">\n<td style=\"height: 35.4688px;\">exclude_lines<\/td>\n<td style=\"height: 35.4688px;\">\ub85c\uadf8 \uc804\ub2ec\ud560\ub54c \uc804\uc1a1\ud558\uc9c0 \uc54a\uc744 \uc904 \ud328\ud134<\/td>\n<td style=\"height: 35.4688px;\"><\/td>\n<\/tr>\n<tr style=\"height: 57.8472px;\">\n<td style=\"height: 57.8472px;\">include_lines<\/td>\n<td style=\"height: 57.8472px;\">\ub85c\uadf8 \uc804\ub2ec\ud560\ub54c \uc804\uc1a1\ud560 \ub77c\uc778 \ud328\ud134<\/td>\n<td style=\"height: 57.8472px;\">\ubaa8\ub4e0\ub77c\uc778\uc758 \ub370\uc774\ud130 \uc804\uc1a1<\/td>\n<\/tr>\n<tr style=\"height: 35.4688px;\">\n<td style=\"height: 35.4688px;\">harvester_buffer_size<\/td>\n<td style=\"height: 35.4688px;\">harvester\uac00 \ud30c\uc77c\uc744 \uac00\uc9c0\uace0 \uc62c\ub54c \uc0ac\uc6a9\ud558\ub294 \ubc84\ud37c\ud06c\uae30<\/td>\n<td style=\"height: 35.4688px;\">16384(\ubc14\uc774\ud2b8 \ub2e8\uc704)<\/td>\n<\/tr>\n<tr style=\"height: 35.4688px;\">\n<td style=\"height: 35.4688px;\">max_bytes<\/td>\n<td style=\"height: 35.4688px;\">\ub2e8\uc77c \ub85c\uadf8 \uba54\uc2dc\uc9c0\uc5d0 \ud560\ub2f9\ud558\ub294 \ucd5c\ub300 \ud06c\uae30<\/td>\n<td style=\"height: 35.4688px;\">10485760(10MB)<\/td>\n<\/tr>\n<tr style=\"height: 260.226px;\">\n<td style=\"height: 260.226px;\">json<\/td>\n<td style=\"height: 260.226px;\">son\ud3ec\ub9f7\uc73c\ub85c \uc791\uc131\ub41c \ub85c\uadf8\ub97c \ub514\ucf54\ub529\ud560\ub584 \uc0ac\uc6a9 (keys_under_root, overwrite_keys, expand_keys \uc911 \ud558\ub098\uc774\uc0c1 \uc9c0\uc815\ud544\uc694)<\/p>\n<p>\u00b7 keys_under_root : \ub514\ucf54\ub529\ub41c json\uc740 json\ud0a4 \uc544\ub798\ubc30\uce58<\/p>\n<p>\u00b7 overwrite_keys : \ud544\ub4dc \ucd94\uac00\uc2dc \ucda9\ub3cc\ub2e4\ub294 \ud544\ub4dc\ub294 \ub36e\uc5b4\uc4f0\uae30 \uc218\ud589<\/p>\n<p>\u00b7 expand_keys : \ucd94\uac00 \ud655\uc778\ud544\uc694<\/p>\n<p>\u00b7 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 add_error_key : json\uc774 \uc815\ub82c\uc791\uc5c5\uc2dc \uc624\ub958\uac00 \ubc1c\uc0dd\ud558\uba74 error.message\uc5d0 error.type: json\ud0a4\ub97c \ucd94\uac00<\/p>\n<p>\u00b7 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 message_key : \ub77c\uc778 \ud544\ud130\ub9c1 \ud639\uc740 \uba40\ud2f0 \ub77c\uc778\uc774 \uc801\uc6a9\ub418\uc5b4 \uc788\ub294 \uacbd\uc6b0 json\ud0a4\ub97c \uc9c0\uc815\ud558 \ub294 \uc124\uc815<\/p>\n<p>\u00b7 document_id : \ubb38\uc11c id\ub97c \uad6c\uc131<\/td>\n<td style=\"height: 260.226px;\"><\/td>\n<\/tr>\n<tr style=\"height: 35.4688px;\">\n<td style=\"height: 35.4688px;\">multiline<\/td>\n<td style=\"height: 35.4688px;\">\uba40\ud2f0\ub77c\uc778\uc758 \uba54\uc2dc\uc9c0\ub97c \ucc98\ub9ac\ud560\ub584 \uc0ac\uc6a9<\/td>\n<td style=\"height: 35.4688px;\"><\/td>\n<\/tr>\n<tr style=\"height: 35.4688px;\">\n<td style=\"height: 35.4688px;\">exclude_files<\/td>\n<td style=\"height: 35.4688px;\">path\uc5d0 \uc815\uc758\ub41c \ud30c\uc77c\uc911 \uc81c\uc678\ud560 \ud30c\uc77c \ub9ac\uc2a4\ud2b8 \ubaa9\ub85d<\/td>\n<td style=\"height: 35.4688px;\"><\/td>\n<\/tr>\n<tr style=\"height: 35.4688px;\">\n<td style=\"height: 35.4688px;\">ignore_older<\/td>\n<td style=\"height: 35.4688px;\">\uc9c0\uc815\ub41c \uc2dc\uac04 \ubc94\uc704 \uc774\uc804\uc5d0 \uc218\uc815\ub41c \ud30c\uc77c\uc740 \uc804\uc1a1 \uc81c\uc678<\/td>\n<td style=\"height: 35.4688px;\"><\/td>\n<\/tr>\n<tr style=\"height: 35.4688px;\">\n<td style=\"height: 35.4688px;\">close_inactive<\/td>\n<td style=\"height: 35.4688px;\">\uc9c0\uc815\ub41c \uc2dc\uac04\ub3d9\uc548 \uc218\uc9d1\ub418\uc9c0 \uc54a\uc740 \uacbd\uc6b0 \ud30c\uc77c\uc744 \ub2eb\uc74c<\/td>\n<td style=\"height: 35.4688px;\"><\/td>\n<\/tr>\n<tr style=\"height: 35.4688px;\">\n<td style=\"height: 35.4688px;\">close_renamed<\/td>\n<td style=\"height: 35.4688px;\">\ud30c\uc77c\uc774\ub984\uc774 \ubcc0\uacbd\ub420\ub54c \ud30c\uc77c\uc744 \ub2eb\uc74c<\/td>\n<td style=\"height: 35.4688px;\"><\/td>\n<\/tr>\n<tr style=\"height: 35.4688px;\">\n<td style=\"height: 35.4688px;\">close_removed<\/td>\n<td style=\"height: 35.4688px;\">\ud30c\uc77c\uc774 \uc81c\uac70\ub420\ub54c harverster \ub3c4 \uc885\ub8cc.<\/td>\n<td style=\"height: 35.4688px;\">true<\/td>\n<\/tr>\n<tr style=\"height: 57.8472px;\">\n<td style=\"height: 57.8472px;\">close_eof<\/td>\n<td style=\"height: 57.8472px;\">\ud30c\uc77c \ub05d\uc5d0 \ub3c4\ub2ec\ud558\uc790\ub9c8\uc790 \ud30c\uc77c\uc744 \ub2eb\uc74c<br \/>\n(\ud55c\ubc88\ub9cc \uc791\uc131\ud558\uace0 \uc218\uc2dc \uc5c5\ub370\uc774\ud2b8\uc2dc \uc720\uc6a9)<\/td>\n<td style=\"height: 57.8472px;\">false<\/td>\n<\/tr>\n<tr style=\"height: 35.4688px;\">\n<td style=\"height: 35.4688px;\">close_timeout<\/td>\n<td style=\"height: 35.4688px;\">\uc815\ud574\uc9c4 \uc2dc\uac04 \ucd08\uacfc\ud558\uba74 \ud30c\uc77c \ub2eb\uc74c<\/td>\n<td style=\"height: 35.4688px;\">0 (\ube44\ud65c\uc131\ud654)<\/td>\n<\/tr>\n<tr style=\"height: 35.4688px;\">\n<td style=\"height: 35.4688px;\">clean_inactive<\/td>\n<td style=\"height: 35.4688px;\">inactive\uae30\uac04 \uacbd\uacfc\ud558\uba74 \ud30c\uc77c\uc0c1\ud0dc \uc81c\uac70<\/td>\n<td style=\"height: 35.4688px;\"><\/td>\n<\/tr>\n<tr style=\"height: 35.4688px;\">\n<td style=\"height: 35.4688px;\">clean_removed<\/td>\n<td style=\"height: 35.4688px;\">\ub9c8\uc9c0\ub9c9\uc73c\ub85c \uc77d\uc740 \ud30c\uc77c\uc774 \uc5c6\ub294 \uacbd\uc6b0 \ub808\uc9c0\uc2a4\ud2b8\ub9ac\uc5d0\uc11c \ud30c\uc77c\uc815\ub9ac<\/td>\n<td style=\"height: 35.4688px;\">true<\/td>\n<\/tr>\n<tr style=\"height: 35.4688px;\">\n<td style=\"height: 35.4688px;\">scan_frequency<\/td>\n<td style=\"height: 35.4688px;\">\uc9c0\uc815\ub41c \uacbd\ub85c\uc5d0\uc11c \uc0c8\ud30c\uc77c\uc744 \ucc3e\ub294 \ube48\ub3c4<\/td>\n<td style=\"height: 35.4688px;\">10(\ucd08\ub2e8\uc704)<\/td>\n<\/tr>\n<tr style=\"height: 35.4688px;\">\n<td style=\"height: 35.4688px;\">tail_files<\/td>\n<td style=\"height: 35.4688px;\">\uac01 \ud30c\uc77c \ub05d\uc5d0\uc11c \uc0c8\ud30c\uc77c\uc744 \uc77d\uae30 \uc2dc\uc791(rotate\uc801\uc6a9\uc2dc \ud65c\uc6a9\uac00\ub2a5)<\/td>\n<td style=\"height: 35.4688px;\">false<\/td>\n<\/tr>\n<tr style=\"height: 35.4688px;\">\n<td style=\"height: 35.4688px;\">symlinks<\/td>\n<td style=\"height: 35.4688px;\">\uc2ec\ubcfc\ub9ad\ub9c1\ud06c\ub41c \ud30c\uc77c \uc218\uc9d1\uc5ec\ubd80<\/td>\n<td style=\"height: 35.4688px;\">false<\/td>\n<\/tr>\n<tr style=\"height: 35.4688px;\">\n<td style=\"height: 35.4688px;\">backoff<\/p>\n<p>&nbsp;<\/td>\n<td style=\"height: 35.4688px;\">\uc5f4\ub9b0\ud30c\uc77c\uc744 \uc5bc\ub9c8\ub098 \ud06c\ub864\ub9c1 \ud558\ub294\uc9c0 \ud655\uc778<\/td>\n<td style=\"height: 35.4688px;\">1(\ucd08\ub2e8\uc704)<\/td>\n<\/tr>\n<tr>\n<td>max_backoff<\/td>\n<td>\ud30c\uc77c\uc774 \ub9c8\uc9c0\ub9c9\uc5d0 \ub3c4\ub2ec\ud55c \ud6c4 \ub2e4\uc2dc \ud655\uc778\ud558\uae30 \uc804\uc5d0 \ub300\uae30\ud558\ub294 \uc2dc\uac04<\/td>\n<td>10(\ucd08\ub2e8\uc704)<\/td>\n<\/tr>\n<tr>\n<td>backoff_factoer<\/td>\n<td>backoff \uc2dc\uac04\uc774 \ub300\uae30\ud558\ub294 \uc2dc\uac04<\/td>\n<td>2<\/td>\n<\/tr>\n<tr style=\"height: 35.4688px;\">\n<td style=\"height: 35.4688px;\">harvester_limit<\/td>\n<td style=\"height: 35.4688px;\">\ud558\ub098\uc758 \uc785\ub825\uc5d0 \ub300\ud574 \ubcd1\ub82c\ub85c \uc218\uc9d1\ud558\ub294 \ucd5c\ub300 harverster \uac2f\uc218<\/td>\n<td style=\"height: 35.4688px;\">0 (\uc81c\ud55c\uc5c6\uc74c)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<table style=\"border-collapse: collapse; width: 100%;\" border=\"1\">\n<colgroup>\n<col style=\"width: 99.881%;\" \/><\/colgroup>\n<tbody>\n<tr>\n<td><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-955\" src=\"http:\/\/www.igoni.kr\/wp-content\/uploads\/2026\/02\/a30e43ea-a563-44a4-8aa0-1392b85910a2.png\" alt=\"\" width=\"1024\" height=\"1024\" srcset=\"http:\/\/www.igoni.kr\/wp-content\/uploads\/2026\/02\/a30e43ea-a563-44a4-8aa0-1392b85910a2.png 1024w, http:\/\/www.igoni.kr\/wp-content\/uploads\/2026\/02\/a30e43ea-a563-44a4-8aa0-1392b85910a2-300x300.png 300w, http:\/\/www.igoni.kr\/wp-content\/uploads\/2026\/02\/a30e43ea-a563-44a4-8aa0-1392b85910a2-150x150.png 150w, http:\/\/www.igoni.kr\/wp-content\/uploads\/2026\/02\/a30e43ea-a563-44a4-8aa0-1392b85910a2-768x768.png 768w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/td>\n<\/tr>\n<tr>\n<td class=\"align-right\">perplexity\uc5d0\uc11c \uc0dd\uc131\ud55c AI\uc774\ubbf8\uc9c0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n","protected":false},"excerpt":{"rendered":"<p>ELK Stack Config Value \uc124\uba85 Filebeat Config \uc815\ubcf4 filebeat Log Config \uac12 \uc124\uc815\uac12 \uc124 \uba85 \uae30\ubcf8\uac12&hellip;<\/p>\n","protected":false},"author":1,"featured_media":955,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[263],"tags":[],"class_list":["post-953","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-elk-stack-"],"aioseo_notices":[],"_links":{"self":[{"href":"http:\/\/www.igoni.kr\/index.php?rest_route=\/wp\/v2\/posts\/953","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.igoni.kr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.igoni.kr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.igoni.kr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.igoni.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=953"}],"version-history":[{"count":1,"href":"http:\/\/www.igoni.kr\/index.php?rest_route=\/wp\/v2\/posts\/953\/revisions"}],"predecessor-version":[{"id":957,"href":"http:\/\/www.igoni.kr\/index.php?rest_route=\/wp\/v2\/posts\/953\/revisions\/957"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.igoni.kr\/index.php?rest_route=\/wp\/v2\/media\/955"}],"wp:attachment":[{"href":"http:\/\/www.igoni.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=953"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.igoni.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=953"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.igoni.kr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=953"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}