流利性->;fluentd使用logstash编码器如何将结构化参数传递给fluentd?
我正在尝试使用TCP(流畅性)和编码器**“net.logstash.logback.encoder.LogstashEncoder”**logstash结构化参数向Fluentd发送数据 我正在使用Fluence将日志传递给fluentd,我的结构化参数丢失,只传递默认字段 如何将结构化参数传递给Fluentd 输出:流利性->;fluentd使用logstash编码器如何将结构化参数传递给fluentd?,logstash,fluentd,Logstash,Fluentd,我正在尝试使用TCP(流畅性)和编码器**“net.logstash.logback.encoder.LogstashEncoder”**logstash结构化参数向Fluentd发送数据 我正在使用Fluence将日志传递给fluentd,我的结构化参数丢失,只传递默认字段 如何将结构化参数传递给Fluentd 输出: level=INFO logger=com.example.demoauditlog.audit.SampleService thread=main message=LOGIN
level=INFO logger=com.example.demoauditlog.audit.SampleService thread=main message=LOGIN TAG=XXX.AUDIT
预期产出:
{"@timestamp":"2021-05-03T08:43:04.141+05:30","@version":"1","message":"LOGIN","logger_name":"com.example.demoauditlog.audit.SampleService","thread_name":"main","level":"INFO","level_value":20000,"User":"XXh","Item":"Audit","Event":"LOGIN","EventInfo":"Logged in successfully","Source":"1.2.3.4","payload":{"empty":true,"present":false}}
我的logback.xml
审计
127.0.0.1
24224
<!-- [Optional] Multiple name/addresses and port numbers which Flentd placed -->
<!-- [Optional] Additional fields(Pairs of key: value) -->
<additionalField>
<key>foo</key>
<value>%username%</value>
</additionalField>
<!-- [Optional] Configurations to customize Fluency's behavior: https://github.com/komamitsu/fluency#usage -->
<ackResponseMode>true</ackResponseMode>
<fileBackupDir>/tmp</fileBackupDir>
<bufferChunkInitialSize>1048576</bufferChunkInitialSize>
<bufferChunkRetentionSize>8388608</bufferChunkRetentionSize>
<maxBufferSize>67108864</maxBufferSize>
<flushAttemptIntervalMillis>400</flushAttemptIntervalMillis>
<connectionTimeoutMilli>5000</connectionTimeoutMilli>
<readTimeoutMilli>5000</readTimeoutMilli>
<bufferChunkRetentionTimeMillis>5000</bufferChunkRetentionTimeMillis>
<waitUntilBufferFlushed>20</waitUntilBufferFlushed>
<waitUntilFlusherTerminated>20</waitUntilFlusherTerminated>
<senderMaxRetryCount>5</senderMaxRetryCount>
<!-- [Optional] Enable/Disable use of EventTime to get sub second resolution of log event date-time -->
<useEventTime>true</useEventTime>
<sslEnabled>false</sslEnabled>
<!-- [Optional] If true, Map Marker is expanded instead of nesting in the marker name -->
<flattenMapMarker>false</flattenMapMarker>
</appender>