json 如何配置Docker将日志传送到logstash

Posted 2021-05-18

# /etc/logstash/conf.d/logstash.conf

input {
  gelf {}
}

filter {
  ruby {
    code => "
      require 'json'
      parsed = JSON.parse(event.get('message')) rescue {}
      event.set('message_parsed', parsed)
    "
  }
}

output {
  elasticsearch {
    hosts => ["localhost:9200"]
    index => "index_name-%{+YYYY.MM.dd}"
  }
}

# /etc/docker/daemon.json

{
    "log-driver": "gelf",
    "log-opts": {
        "gelf-address": "udp://127.0.0.1:12201",
        "labels": "production_status",
        "env": "os,customer"
    }
}