1，logstash安裝zabbix外掛

./logstash-plugin install logstash-output-zabbix

2，編寫logstash 的啟動檔案

[root@zabbix-agent ~]# 
[root@zabbix-agent ~]# cat /root/logstash/b.conf 

input {
   file {
        path => "/home/elk/test.log"
        start_position => "beginning"
        add_field => [ "[@metadata][zabbix_key]" , "key.log.error" ]
        add_field => [ "[@metadata][zabbix_host]" , "pwcc" ]
   }
}
output {
        stdout { codec => rubydebug }
        zabbix {
                zabbix_host => "[@metadata][zabbix_host]"
                zabbix_key => "[@metadata][zabbix_key]"
                zabbix_server_host => "192.168.0.11"
                zabbix_server_port => "10051"
                zabbix_value => "message"
        }
}
[root@zabbix-agent ~]# 
[root@zabbix-agent ~]# 

3，配置zabbix-web-ui

配置host

配置監控項item

最後配置觸發器

4，啟動logstash測試

[root@zabbix-agent elk]# echo "test1" >>test.log 
[root@zabbix-agent elk]# echo "test2" >>test.log 
[root@zabbix-agent elk]# 
[root@zabbix-agent elk]# echo "test3" >>test.log 
[root@zabbix-agent elk]# echo "test4" >>test.log 

6，觸發發生告警