问题：

我们的运维配置 EFK 不会配置 filter 来提取日志中的字段

我发现可以直接使用 logback appender 将日志输出到 elasticsearch

测试环境这么搞搞就行了

 

 

 

解决：

1. pom.xml 增加
   
   <dependency> <groupId>com.internetitem</groupId> <artifactId>logback-elasticsearch-appender</artifactId> <version>1.6</version> </dependency>

   1 2 3 4 5

   <dependency>             <groupId>com.internetitem</groupId>             <artifactId>logback-elasticsearch-appender</artifactId>             <version>1.6</version>         </dependency>

   
    
2. logback-spring.xml
   
   <configuration debug="true"> <springProperty scope="context" name="springAppName" source="spring.application.name"/> <!--默认配置--> <include resource="org/springframework/boot/logging/logback/defaults.xml"/> <!--配置控制台(Console)--> <include resource="org/springframework/boot/logging/logback/console-appender.xml"/> <appender name="ELASTIC" class="com.internetitem.logback.elasticsearch.ElasticsearchAppender"> <url>http://10.0.70.110:9200/_bulk</url> <!-- <index>logs-%date{yyyy-MM-dd}</index>--> <index>citysass</index> <!-- <type>tester</type>--> <!-- <loggerName>es-logger</loggerName> &lt;!&ndash; optional &ndash;&gt;--> <!-- <errorLoggerName>es-error-logger</errorLoggerName> &lt;!&ndash; optional &ndash;&gt;--> <connectTimeout>30000</connectTimeout> <!-- optional (in ms, default 30000) --> <errorsToStderr>false</errorsToStderr> <!-- optional (default false) --> <includeCallerData>false</includeCallerData> <!-- optional (default false) --> <logsToStderr>false</logsToStderr> <!-- optional (default false) --> <maxQueueSize>104857600</maxQueueSize> <!-- optional (default 104857600) --> <maxRetries>3</maxRetries> <!-- optional (default 3) --> <readTimeout>30000</readTimeout> <!-- optional (in ms, default 30000) --> <sleepTime>250</sleepTime> <!-- optional (in ms, default 250) --> <rawJsonMessage>false</rawJsonMessage> <!-- optional (default false) --> <includeMdc>true</includeMdc> <!-- optional (default false) --> <maxMessageSize>-1</maxMessageSize> <!-- optional (default -1 --> <!-- <authentication class="com.internetitem.logback.elasticsearch.config.BasicAuthentication" /> &lt;!&ndash; optional &ndash;&gt;--> <properties> <property> <name>appName</name> <value>${springAppName}</value> </property> <property> <name>host</name> <value>HOST</value> <allowEmpty>true</allowEmpty> </property> <property> <name>severity</name> <value>%level</value> </property> <property> <name>thread</name> <value>%thread</value> </property> <property> <name>stacktrace</name> <value>%ex</value> </property> <property> <name>logger</name> <value>%logger</value> </property> </properties> <headers> <header> <name>Content-Type</name> <value>application/json</value> </header> </headers> </appender> <logger name="com.telsafe" level="DEBUG"/> <root level="INFO"> <appender-ref ref="CONSOLE"/> </root> <springProfile name="eslog"> <root level="INFO"> <appender-ref ref="ELASTIC"/> </root> </springProfile> </configuration>

   1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71

   <configuration debug="true">     <springProperty scope="context" name="springAppName" source="spring.application.name"/>     <!--默认配置-->     <include resource="org/springframework/boot/logging/logback/defaults.xml"/>     <!--配置控制台(Console)-->     <include resource="org/springframework/boot/logging/logback/console-appender.xml"/>     <appender name="ELASTIC" class="com.internetitem.logback.elasticsearch.ElasticsearchAppender">         <url>http://10.0.70.110:9200/_bulk</url> <!--        <index>logs-%date{yyyy-MM-dd}</index>-->         <index>citysass</index> <!--        <type>tester</type>--> <!--        <loggerName>es-logger</loggerName> &lt;!&ndash; optional &ndash;&gt;--> <!--        <errorLoggerName>es-error-logger</errorLoggerName> &lt;!&ndash; optional &ndash;&gt;-->         <connectTimeout>30000</connectTimeout> <!-- optional (in ms, default 30000) -->         <errorsToStderr>false</errorsToStderr> <!-- optional (default false) -->         <includeCallerData>false</includeCallerData> <!-- optional (default false) -->         <logsToStderr>false</logsToStderr> <!-- optional (default false) -->         <maxQueueSize>104857600</maxQueueSize> <!-- optional (default 104857600) -->         <maxRetries>3</maxRetries> <!-- optional (default 3) -->         <readTimeout>30000</readTimeout> <!-- optional (in ms, default 30000) -->         <sleepTime>250</sleepTime> <!-- optional (in ms, default 250) -->         <rawJsonMessage>false</rawJsonMessage> <!-- optional (default false) -->         <includeMdc>true</includeMdc> <!-- optional (default false) -->         <maxMessageSize>-1</maxMessageSize> <!-- optional (default -1 --> <!--        <authentication class="com.internetitem.logback.elasticsearch.config.BasicAuthentication" /> &lt;!&ndash; optional &ndash;&gt;-->         <properties>             <property>                 <name>appName</name>                 <value>${springAppName}</value>             </property>             <property>                 <name>host</name>                 <value>HOST</value>                 <allowEmpty>true</allowEmpty>             </property>             <property>                 <name>severity</name>                 <value>%level</value>             </property>             <property>                 <name>thread</name>                 <value>%thread</value>             </property>             <property>                 <name>stacktrace</name>                 <value>%ex</value>             </property>             <property>                 <name>logger</name>                 <value>%logger</value>             </property>         </properties>         <headers>             <header>                 <name>Content-Type</name>                 <value>application/json</value>             </header>         </headers>     </appender>     <logger name="com.telsafe" level="DEBUG"/>       <root level="INFO">         <appender-ref ref="CONSOLE"/>     </root>     <springProfile name="eslog">         <root level="INFO">             <appender-ref ref="ELASTIC"/>         </root>     </springProfile>   </configuration>

   
    
3. 运行时启用 profiles  -Dspring.prifiles.active=default,eslog  . eslog 会启用 logback中配置的 appender

 

 

参考：

https://github.com/internetitem/logback-elasticsearch-appender