运维之道 | ELK 通过 Logstash 收集 Nginx 日志

ELK 通过 Logstash 收集 Nginx 日志

1、安装部署Nginx

运维之道 | 企业级Nginx环境搭建

2、将nginx日志转换成json格式

[root@localhost ~]# vim /usr/local/nginx/conf/nginx.conf

http {
   
    include       mime.types;
    default_type  application/octet-stream;
													   在http{块里添加下面内容

log_format access_json '{"@timestamp":"$time_iso8601",'
                           '"host":"$server_addr",'
                           '"clientip":"$remote_addr",'
                           '"size":$body_bytes_sent,'
                           '"responsetime":$request_time,'
                           '"upstreamtime":"$upstream_response_time",'
                           '"upstreamhost":"$upstream_addr",'
                           '"http_host":"$host",'
                           '"url":"$uri",'
                           '"domain":"$host",'
                           '"xff":"$http_x_forwarded_for",'
                           '"referer":"$http_referer",'
                           '"status":"$status"}';

 access_log  /var/log/nginx/access.log  access_json;
.......

3、验证nginx配置是否正确

[root@localhost ~]