Kibana以JSON格式将日志发送到Syslog

4

今天我启动了一个ELK堆栈,一切正常,但不知什么原因,Kibana会将自己的消息以JSON格式记录到syslog中,例如:

Oct 19 18:49:28 elk-host kibana[11111]: {"type":"response","@timestamp":"2016-10-19T17:49:28+00:00","tags":[],"pid":22749,"method":"post","statusCode":200,"req":{"url":"/elasticsearch/logstash*/_field_stats?level=indices","method":"post","headers":{"host":"1.2.3.4:5601","connection":"keep-alive","content-length":"178","accept":"application/json, text/plain, */*","origin":"http://1.2.3.4:5601","kbn-version":"4.4.2","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36","content-type":"application/json;charset=UTF-8","referer":"http://1.2.3.4:5601/app/kibana","accept-encoding":"gzip, deflate","accept-language":"en-US,en;q=0.8"},"remoteAddress":"5.6.7.8","userAgent":"5.6.7.8","referer":"http://1.2.3.4:5601/app/kibana"},"res":{"statusCode":200,"responseTime":11,"contentLength":9},"message":"POST /elasticsearch/logstash*/_field_stats?level=indices 200 11ms - 9.0B"}

所有其他日志都是正常格式

这是有意为之还是我错过了Kibana的设置?

如果这是有意为之的,我可能会添加一个syslog过滤器来正确记录它...但希望不必这样做。

1个回答

8
在 Kibana 的配置文件中(位于 config/kibana.yml),您可以添加以下(未记录的)设置:
logging.json: false

并且您的Kibana日志将不再被格式化为JSON。


2
不错,谢谢。我还需要添加“logging.verbose:true”才能使其正常工作。不幸的是,日志仍然包括颜色代码,例如:“#033[34m log # 033[39m [18:47:39.504]”,但我会浏览源代码,看看是否有改变它的方法。未记录的事情略微烦人。 - Just Lucky Really
1
现在已经有文档记录了。 - OrangeDog

网页内容由stack overflow 提供, 点击上面的
可以查看英文原文,
原文链接