我正在尝试将自定义字段添加到logback-spring.xml中的logstash追加程序中,如下所示:
<?xml version="1.0" encoding="UTF-8"?>
<configuration>
<appender name="stash" class="net.logstash.logback.appender.LogstashSocketAppender">
<host>xx.xx.xx.xx</host>
<port>xxxxx</port>
<encoder class="net.logstash.logback.encoder.LogstashEncoder">
<includeMdcKeyName>myField</includeMdcKeyName>
</encoder>
</appender>
<root level="info">
<appender-ref ref="stash" />
</root>
</configuration>
它给我错误:
Exception in thread "main" java.lang.IllegalStateException: Logback configuration error detected: ERROR in ch.qos.logback.core.joran.spi.Interpreter@34:71 - no applicable action for [encoder], current ElementPath is [[configuration][appender][encoder]]
当我尝试控制台附加程序,并尝试打印该字段时,如下面的示例所示,它起作用了。
<layout>
<Pattern>%-4r [%thread] %-5level My Field: [%X{myField:--}] %msg%n</Pattern>
</layout>
你能告诉我我对udp appender做错了什么吗?谢谢你的指教。
最佳答案
您使用的是UDP appender,它没有encoder
。您应该使用TCP Appender(LogstashTcpSocketAppender
而不是LogstashSocketAppender
):
<appender name="stash" class="net.logstash.logback.appender.LogstashTcpSocketAppender">
<destination>xx.xx.xx.xx:xxxxx</destination>
<encoder class="net.logstash.logback.encoder.LogstashEncoder">
<includeMdcKeyName>myField</includeMdcKeyName>
</encoder>
</appender>
看看我创建了here的演示项目。
This code(Kotlin):
MDC.put("mdc", "so53558553")
LOG.warn("Warn")
用这样的
logback-spring.xml
:<appender name="logstash" class="net.logstash.logback.appender.LogstashTcpSocketAppender">
<destination>localhost:5000</destination>
<encoder class="net.logstash.logback.encoder.LogstashEncoder">
<includeMdcKeyName>mdc</includeMdcKeyName>
</encoder>
</appender>
在Logstash中产生这样的记录:
{
"level_value" => 30000,
"mdc" => "so53558553",
"port" => 35450,
"logger_name" => "by.dev.madhead.playgrounds.so53558553.SpringBootConsoleApplication",
"host" => "172.17.0.1",
"@version" => "1",
"@timestamp" => 2018-12-03T01:16:28.793Z,
"thread_name" => "main",
"message" => "Warn",
"level" => "WARN"
}
如您所见,Logstash将
mdc
值视为LoggingEvent
中的一个字段。编辑
由于ELK配置错误,您可能看不到Kibana中的字段。我将Logstash pipiline配置(
/etc/logstash/conf.d/01-input.conf
)粘贴仅供引用(这是非常基本的):input {
tcp {
port => 5000
codec => json_lines
}
}
output {
elasticsearch {
hosts => [ "localhost:9200" ]
index => "logback-%{+YYYY.MM.dd}"
}
}
然后,我用
logback-*
模式在Kibana中配置了日志:瞧:
关于spring - 将特定的MDC字段追加到Logstash日志中,我们在Stack Overflow上找到一个类似的问题: https://stackoverflow.com/questions/53558553/