[root@node conf.d]# cat /etc/logstash/conf.d/logstash.conf input { file { path => "/var/log/messages" } } output { file { path => "/logstash-test/%{+YYYY-MM-dd-HH}.messages.gz&quo