分布式ELK链路追踪

﹏ヽ暗。殇╰゛Y 2022-01-26 04:23 307阅读 0赞

logstash 建立分布式索引

input\{  
        tcp \{  
                mode => "server"  
                host => "0.0.0.0"  
                port => 4567  
                codec => json\_lines  
        \}  
\}  
output\{  
        elasticsearch\{  
                hosts=>\["127.0.0.1:9200"\]  
                index =>"logstash-%\{springAppName\}"  
                \}  
        stdout\{codec => rubydebug\}  
\}

微服务项目日志配置：

<?xml version="1.0" encoding="UTF-8"?>
    <configuration>
        <include resource="org/springframework/boot/logging/logback/base.xml" />
        <statusListener class="ch.qos.logback.core.status.NopStatusListener" />
        <springProperty scope="context" name="springAppName" source="spring.application.name" />
        
        <property name="LOG_FILE" value="${BUILD_FOLDER:-build}/${springAppName}" />
    
        <appender name="LOGSTASH" class="net.logstash.logback.appender.LogstashTcpSocketAppender">
            <destination>127.0.0.1:4567</destination> //logstash ip和暴露的端口，我目前理解就是通过这个地址把日志发送过去
            <encoder charset="UTF-8" class="net.logstash.logback.encoder.LogstashEncoder" />
        </appender>
    
        <root level="INFO">
            <appender-ref ref="LOGSTASH" />
            <appender-ref ref="CONSOLE" />
        </root>
    
    </configuration>

其中pom.xml引入2个jar包

<dependency>
        <groupId>org.springframework.cloud</groupId>
        <artifactId>spring-cloud-starter-sleuth</artifactId>
        <version>1.3.0.RELEASE</version>
    </dependency>
    <dependency>
        <groupId>net.logstash.logback</groupId>
        <artifactId>logstash-logback-encoder</artifactId>
        <version>5.3</version>
    </dependency>