<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Logstash on 黄文卓 | DevOps Engineer</title><link>https://socake.github.io/tags/logstash/</link><description>Recent content in Logstash on 黄文卓 | DevOps Engineer</description><generator>Hugo -- gohugo.io</generator><language>zh-CN</language><managingEditor>17691281867@163.com (Wenzhuo Huang)</managingEditor><webMaster>17691281867@163.com (Wenzhuo Huang)</webMaster><copyright>© 2026 Wenzhuo Huang</copyright><lastBuildDate>Fri, 10 Oct 2025 10:20:00 +0800</lastBuildDate><atom:link href="https://socake.github.io/tags/logstash/index.xml" rel="self" type="application/rss+xml"/><item><title>Filebeat + Logstash 日志采集管道：大规模日志处理实战</title><link>https://socake.github.io/posts/filebeat-logstash-pipeline/</link><pubDate>Fri, 10 Oct 2025 10:20:00 +0800</pubDate><author>17691281867@163.com (Wenzhuo Huang)</author><guid>https://socake.github.io/posts/filebeat-logstash-pipeline/</guid><description>大流量日志场景下，Fleet 直写 ES 会出现严重写入堆积。本文记录了我们从 Fleet 切换到 Filebeat + Kafka + Logstash 管道的全过程，重点讲 Logstash pipeline 配置和性能调优。</description><media:content xmlns:media="http://search.yahoo.com/mrss/" url="https://socake.github.io/posts/filebeat-logstash-pipeline/featured.jpg"/></item></channel></rss>