签入版本

deploy/elk/elasticsearch.yml

@@ -0,0 +1,6 @@
+# Elasticsearch 日志收集配置（占位）
+cluster.name: tornado-elevue
+node.name: node-1
+network.host: 0.0.0.0
+http.port: 9200
+discovery.type: single-node

deploy/elk/logstash.conf

@@ -0,0 +1,22 @@
+# Logstash 日志管道配置（占位）
+input {
+  file {
+    path => "/data/apps/logs/app.log"
+    start_position => "beginning"
+    sincedb_path => "/dev/null"
+    codec => json
+  }
+}
+
+filter {
+  date {
+    match => ["timestamp", "ISO8601"]
+  }
+}
+
+output {
+  elasticsearch {
+    hosts => ["elasticsearch:9200"]
+    index => "tornado-elevue-%{+YYYY.MM.dd}"
+  }
+}