nginx

Nginx日志格式

log_format access '$remote_addr $remote_user [$time_local] "$request" ' '$status $body_bytes_sent "$http_referer" ' '$http_user_agent $http_x_forwarded_for $request_time $upstream_response_time $upstream_addr $upstream_status';

定义日志格式

log_format access_jkyy '$remote_addr - $remote_user [$time_local] "$request" ' '$status $body_bytes_sent "$http_referer" ' '$http_user_agent $http_x_forwarded_for $request_time $upstream_addr $upstream_status $upstream_response_time';

日志grok

    "^\|TID: (?<trace_id>.*)\|%{TIMESTAMP_ISO8601:logdate}\|%{LOGLEVEL:log_level}\s?\|%{USERNAME:app_name}\|%{URIPATH:request_uri}?\|%{URIPROTO:http_method}?\|%{IP:client_ip}?\|%{USERNAME:thread_name}?\|%{DATA:package_name_and_line}?\|%{BASE16NUM:request_id}?\|(?<msg>.*?(?<json_msg>[\{|\[]\"resultCode\".*[\}|\]])?)\|"