Filebeat直接往ES中传输数据，在kibana中文乱码

最新推荐文章于 2025-07-11 23:31:32 发布

原创最新推荐文章于 2025-07-11 23:31:32 发布 · 2.6k 阅读

3 ·

CC 4.0 BY-SA版权

filebeat 专栏收录该内容

2 篇文章

订阅专栏

本文介绍了解决Kibana展示中文出现乱码的问题，通过在Filebeat配置文件中设置正确的编码格式来确保日志文件能正确读取中文字符。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

kibana展示中文乱码是由于Filebeat制定的编码集不是GB2312，解决方法如下
在filebeat.yml 中paths 上加 encoding: GB2312

filebeat.inputs:
- type: log
  enabled: true
  paths:
    - /var/log/nginx/access.log 
  encoding: GB2312   
  fields:
    type: www_access
- type: log
  paths:
    - /var/log/nginx/io.error.log
  encoding: GB2312
  fields:
    type: www_error
- type: log
  paths:
    - /var/log/nginx/doc.access.log
  encoding: GB2312
  fields: 
    type: doc_access 
# ============================== Filebeat modules ==============================

filebeat.config.modules:
  # Glob pattern for configuration loading
  path: ${path.config}/modules.d/*.yml

  # Set to true to enable config reloading
  reload.enabled: false

  # Period on which files under path should be checked for changes
  #reload.period: 10s     
# ======================= Elasticsearch template setting =======================

setup.template.settings:
  index.number_of_shards: 1
  #index.codec: best_compression
  #_source.enabled: false     
# =================================== Kibana ===================================

# Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API.
# This requires a Kibana endpoint configuration.
setup.kibana:

  # Kibana Host
  # Scheme and port can be left out and will be set to the default (http and 5601)
  # In case you specify and additional path, the scheme is required: http://localhost:5601/path
  # IPv6 addresses should always be defined as: https://[2001:db8::1]:5601
  host: "192.168.**:5601"     
# ---------------------------- Elasticsearch Output ----------------------------
output.elasticsearch:
  # Array of hosts to connect to.
  hosts: ["192.168.**:9200"]    
# ================================= Processors =================================
processors:
  - add_host_metadata:
      when.not.contains.tags: forwarded
  - add_cloud_metadata: ~
  - add_docker_metadata: ~
  - add_kubernetes_metadata: ~