springboot logback.xml 整合ELK

最新推荐文章于 2024-09-23 22:32:25 发布

wjw1639942939

最新推荐文章于 2024-09-23 22:32:25 发布

阅读量787

点赞数

分类专栏： ELK日志分析系统搭建及应用

本文链接：https://blog.csdn.net/wjw1639942939/article/details/84325877

版权

ELK日志分析系统搭建及应用专栏收录该内容

3 篇文章 0 订阅

订阅专栏

本文介绍了如何在SpringBoot应用中通过logback.xml配置将日志数据发送到ELK（Elasticsearch, Logstash, Kibana）堆栈。首先，在pom文件中添加了logstash依赖。然后，详细展示了logback.xml配置，设置日志拦截器将所有日志信息发送到Logstash的4560端口。此外，还提到了如何配置Logstash以接收特定内容并将其索引到Elasticsearch。" 133369125,19673921,Android StrictMode：性能分析与调试实战,"['Android开发', '编程', '性能优化']

摘要由CSDN通过智能技术生成

1.pom文件添加logstash依赖包

<dependency>
    <groupId>net.logstash.logback</groupId>
    <artifactId>logstash-logback-encoder</artifactId>
    <version>5.0</version>
</dependency>

2.所有的日志都拦截到es,logback.xml配置

<?xml version="1.0" encoding="UTF-8"?>

3.拦截指定的内容到ES,logback.xml配置

<?xml version="1.0" encoding="UTF-8"?>

<configuration scan="true">  
   <appender name="CONSOLE" class="ch.qos.logback.core.ConsoleAppender">
      <encoder>
         <pattern>%d{yy-MM-dd.HH:mm:ss.SSS} [%-16t] %-5p %-22c{0} %X{ServiceId} - %m%n</pattern>
      </encoder>
   </appender>
       <appender name="LOGSTASH" class="net.logstash.logback.appender.LogstashTcpSocketAppender">  
              <destination>116.196.117.183:4560</destination>  
              <encoder charset="UTF-8" class="net.logstash.logback.encoder.LogstashEncoder" >
                    <customFields>{"projectName":"foc"}</customFields>
                  </encoder> 
          </appender>
   <logger name="behaviorRecordLog" level="INFO" additivity="true">
      <appender-ref ref="LOGSTASH"/>
   </logger>
       <root level="INFO">  
            <appender-ref ref="CONSOLE" />
        </root>

</configuration>
3.1 指定类的编写

package com.swcares.logstash;

import com.alibaba.fastjson.JSON;
import com.swcares.dto.BehaviorRecordDto;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.stereotype.Component;

import java.util.Date;

/**
 * @author wjw
 * @Description: 用户行为日志
 * @date 2018-11-21
 */
@Component("behaviorRecordLogHandler")
public class BehaviorRecordLogHandler {
    private final static Logger logger = LoggerFactory.getLogger("behaviorRecordLog");
    /**
     * 行为记录写入日志
     * @Title: log
     * @param behaviorRecordVo
     * @author: wjw
     * @date: 2018年11月21日
     */
    public void log(BehaviorRecordDto behaviorRecordVo) {
        logger.info(JSON.toJSONString(behaviorRecordVo));
    }
    /**
     * 行为记录写入日志
     * @Title: log
     * @param record 行为记录
     * @param operatorName 操作人名称
     * @author: wjw
     * @date: 2018年11月21日
     */
    public void log(String record,String operatorName) {
        BehaviorRecordDto behaviorRecordVo = new BehaviorRecordDto();
        behaviorRecordVo.setOperatorName(operatorName);
        behaviorRecordVo.setOperatorRecord(record);
        behaviorRecordVo.setOperatorTime(new Date());
        log(behaviorRecordVo);
    }
    /**
     * 行为记录写入日志
     * @Title: log
     * @param record 行为记录
     * @param operatorName 操作人名称
     * @param reassignment 操作备注
     * @author: wjw
     * @date: 2018年11月21日
     */
    public void logRemark(String record,String operatorName,String reassignment) {
        BehaviorRecordDto behaviorRecordVo = new BehaviorRecordDto();
        behaviorRecordVo.setOperatorName(operatorName);
        behaviorRecordVo.setOperatorRecord(record);
        behaviorRecordVo.setOperatorTime(new Date());
        behaviorRecordVo.setOperatorMask(reassignment);
        log(behaviorRecordVo);
    }
}
4.logstash配置文件编写

input {
# For detail config for log4j as input,
# See: https://www.elastic.co/guide/en/logstash/current/plugins-inputs-log4j.html
tcp {
mode => "server"
host => "0.0.0.0"
port => 4560
codec => json_lines
}
}
filter {
#Only matched data are send to output.
}
output {
# For detail config for elasticsearch as output,
# See: https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html
elasticsearch {
action => "index" #The operation on ES
hosts => "116.196.117.183:9200" #ElasticSearch host, can be array.
index => "%{[projectName]}" #The index to write data to.
}
}