nginx日志中$request_body 十六進制字符(\\x22) 引號問題處理記錄


 

在使用nginx記錄訪問日志時,發現在含有 request_body
的 PUT
, POST
請求時,日志中會含有 x22
x9B
x5C
x09
x08
字符,不利於閱讀和處理。


具體 支持 request_body
的http method參見 http1.1定義 9 Method Definitions
和 Payloads of HTTP Request Methods


nginx.conf
默認access_log 配置

log_format  main '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"'
                      '$http_host $upstream_status $upstream_addr $request_time $upstream_response_time';



改成

log_format json_log escape=json '{"realip":"$remote_addr","@timestamp":"$time_iso8601","host":"$http_host","request":"$request","req_body":"$request_body","status":"$status","size":$body_bytes_sent,"ua":"$http_user_agent","cookie":"$http_cookie","req_time":"$request_time","uri":"$uri","referer":"$http_referer","xff":"$http_x_forwarded_for","ups_status":"$upstream_status","ups_addr":"$upstream_addr","ups_time":"$upstream_response_time"}';


參考 How to generate a JSON log from nginx?

官方文檔ngx_http_log_module.html#log_format
注意, escape
是從 1.11.8
后新增的參數。

如果是老版本的,linux可以考慮使用 shell
命令替換, logstash
可以考慮使用 ruby
處理 ,參考 Optionally support handling of x escape codes

博客 https://anjia.ml/2017/06/21/nginx-logging-request-body-as-hexidecimal/

簡書 http://www.jianshu.com/p/8409f28f32e9

掘金 https://juejin.im/post/5949e0f7128fe1006a627cc0

 


免責聲明!

本站轉載的文章為個人學習借鑒使用,本站對版權不負任何法律責任。如果侵犯了您的隱私權益,請聯系本站郵箱yoyou2525@163.com刪除。



 
粵ICP備18138465號   © 2018-2025 CODEPRJ.COM