流利性->;fluentd使用logstash编码器如何将结构化参数传递给fluentd?

流利性->;fluentd使用logstash编码器如何将结构化参数传递给fluentd?,logstash,fluentd,Logstash,Fluentd,我正在尝试使用TCP(流畅性)和编码器**“net.logstash.logback.encoder.LogstashEncoder”**logstash结构化参数向Fluentd发送数据 我正在使用Fluence将日志传递给fluentd,我的结构化参数丢失,只传递默认字段 如何将结构化参数传递给Fluentd 输出: level=INFO logger=com.example.demoauditlog.audit.SampleService thread=main message=LOGIN

我正在尝试使用TCP(流畅性)和编码器**“net.logstash.logback.encoder.LogstashEncoder”**logstash结构化参数向Fluentd发送数据 我正在使用Fluence将日志传递给fluentd,我的结构化参数丢失,只传递默认字段

如何将结构化参数传递给Fluentd

输出:

level=INFO logger=com.example.demoauditlog.audit.SampleService thread=main message=LOGIN TAG=XXX.AUDIT
预期产出:

{"@timestamp":"2021-05-03T08:43:04.141+05:30","@version":"1","message":"LOGIN","logger_name":"com.example.demoauditlog.audit.SampleService","thread_name":"main","level":"INFO","level_value":20000,"User":"XXh","Item":"Audit","Event":"LOGIN","EventInfo":"Logged in successfully","Source":"1.2.3.4","payload":{"empty":true,"present":false}}
我的logback.xml

审计 127.0.0.1 24224
    <!-- [Optional] Multiple name/addresses and port numbers which Flentd placed -->

    <!-- [Optional] Additional fields(Pairs of key: value) -->
    <additionalField>
        <key>foo</key>
        <value>%username%</value>
    </additionalField>

    <!-- [Optional] Configurations to customize Fluency's behavior: https://github.com/komamitsu/fluency#usage  -->
    <ackResponseMode>true</ackResponseMode>
    <fileBackupDir>/tmp</fileBackupDir>
    <bufferChunkInitialSize>1048576</bufferChunkInitialSize>
    <bufferChunkRetentionSize>8388608</bufferChunkRetentionSize>
    <maxBufferSize>67108864</maxBufferSize>
    <flushAttemptIntervalMillis>400</flushAttemptIntervalMillis>
    <connectionTimeoutMilli>5000</connectionTimeoutMilli>
    <readTimeoutMilli>5000</readTimeoutMilli>
    <bufferChunkRetentionTimeMillis>5000</bufferChunkRetentionTimeMillis>
    <waitUntilBufferFlushed>20</waitUntilBufferFlushed>
    <waitUntilFlusherTerminated>20</waitUntilFlusherTerminated>
    <senderMaxRetryCount>5</senderMaxRetryCount>

    <!-- [Optional] Enable/Disable use of EventTime to get sub second resolution of log event date-time -->
    <useEventTime>true</useEventTime>
    <sslEnabled>false</sslEnabled>
    <!--  [Optional] If true, Map Marker is expanded instead of nesting in the marker name -->
    <flattenMapMarker>false</flattenMapMarker>


</appender>