使用log4j socketappender的logstash不起作用 [英] logstash with log4j socketappender doesn't work

问题描述

我正在尝试通过log4j套接字附加器流式传输日志，并尝试通过logstash log4j输入插件检索相同的日志.我的logstash配置看起来像

I am trying to stream my logs through the log4j socket appender and trying to retrieve the same through the logstash log4j input plugin. My logstash configuration looks like

input {
        log4j
        {
         type=>"socketlogs"
          port=>"1995"
        }
}

output {
        stdout {}
        file
        { path=>"socket.log"}

}

我的log4j.xml如下所示

My log4j.xml looks like below

<appender name="logstashsocketappender" class="org.apache.log4j.net.SocketAppender">
        <param name="RemoteHost" value=<logstash ip>/>
        <param name="Port" value="1995"/>
        <param name="ReconnectionDelay" value="60000"/>
        <param name="Threshold" value="INFO"/>   
    </appender>

<root>
        <level value="INFO"/>
        <appender-ref ref="logstashsocketappender"/>
    </root>

我在测试代码中有一个logger.info语句，但是在logstash机器的stdout中看不到那些.这些是我正在使用的软件版本

I have a logger.info statement in the code for testing, however I do not see those in stdout in the logstash machine. These are the software versions I am using

logstash-1.4.2 log4j-1.7.5

logstash - 1.4.2 log4j - 1.7.5

让我知道我是否在这里丢失了一些东西.

Let me know if I am missing something here.

感谢您的帮助 古里

推荐答案

您是否尝试过使用GELF? log4j内部使用TCP. GELF使用UDP，因此不会降低应用程序的速度.

Have you tried to use GELF? The log4j internals use TCP. GELF uses UDP, so it does not slow down your application.

logstash.conf

input {
    gelf {
        port => 12201
    }
}

log4j.xml

<appender name="gelf" class="biz.paluch.logging.gelf.log4j.GelfLogAppender">
    <param name="Threshold" value="INFO" />
    <param name="Host" value="udp:localhost" />
    <param name="Port" value="12201" />
</appender>

有关更多文档，请参见 https://github.com/mp911de/logstash-gelf .

See https://github.com/mp911de/logstash-gelf for more docs.

这篇关于使用log4j socketappender的logstash不起作用的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！