Nginx 日志打印POST數據

在工作中，開發希望能從Nginx日志中獲取POST的數據信息，先記錄下來

在日志格式后面加上 $request_body 配置信息

log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for" $request_body';

在server中添加打印日志的操作
access_log  logs/access.log  main;　　

本以為問題解決了，開發有要求在日志中添加上 服務器響應返回的數據

目前的 nginx 是不支持輸出 response 報文體的 使用body_filter_by_lua來分配請求報文體給一個nginx變量。下面是一個示例

1：下載安裝LuaJIT

# wget http://luajit.org/download/LuaJIT-2.0.2.tar.gz
# tar -xzvf LuaJIT-2.0.2.tar.gz
# cd LuaJIT-2.0.2
# make
 
出現如下內容表示編譯成功
OK        Successfully built LuaJIT
make[1]: Leaving directory `/usr/local/src/LuaJIT-2.0.2/src'
==== Successfully built LuaJIT 2.0.2 ====
 
# make install
出現如下內容，表示安裝成功
==== Successfully installed LuaJIT 2.0.2 to /usr/local ====

2：下載准備nginx lua模塊　

wget https://github.com/chaoslawful/lua-nginx-module/archive/v0.8.6.tar.gz
tar -xzvf  lua-nginx-module-0.8.6.tar.gz
mv lua-nginx-module-0.8.6  /usr/local/src/lua-nginx-module-0.8.6

3：安裝nginx

tar zxf nginx-1.16.1.tar.gz
cd nginx-1.16.1
//先導入環境變量,告訴nginx去哪里找luajit
export LUAJIT_LIB=/usr/local/lib
export LUAJIT_INC=/usr/local/include/luajit-2.0

./configure --prefix=/usr/local/nginx --add-module=/usr/local/src/lua-nginx-module-0.8.6 --with-http_ssl_module --with-http_stub_status_module --with-pcre

make j2
make install　　

　常見錯誤處理：

/usr/local/nginx-1.4.2/sbin/nginx -v
./objs/nginx: error while loading shared libraries: libluajit-5.1.so.2: cannot open shared object file: No such file or directory
解決方法：
# ln -s /usr/local/lib/libluajit-5.1.so.2 /lib64/libluajit-5.1.so.2

4：配置Nginx

nginx配置文件加入如下配置：

location /test {
      default_type 'text/plain';
      content_by_lua 'ngx.say("hello, ttlsa lua")';
}

5：訪問測試

curl http://127.0.0.1/test
hello, ttlsa lua  //使用curl測試,返回數據表示安裝成功

6：Nginx日志配置

log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for" $request_body  resp_body:"$resp_body"';　　

在server中添加相應的配置：

lua_need_request_body on;

set $resp_body "";
body_filter_by_lua '
local resp_body = string.sub(ngx.arg[1], 1, 1000)
ngx.ctx.buffered = (ngx.ctx.buffered or"") .. resp_body
if ngx.arg[2] then
ngx.var.resp_body = ngx.ctx.buffered
end
';　　

如下事例：

server {
        listen         443  ssl;
        server_name  xxxx.com;

        # ssl  on;
        ssl_certificate /usr/local/nginx/conf/keys/public.pem;
        ssl_certificate_key  /usr/local/nginx/conf/keys/private.key;
        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers ECDH:AESGCM:HIGH:!RC4:!DH:!MD5:!3DES:!aNULL:!eNULL;
        ssl_prefer_server_ciphers  on;

        lua_need_request_body on;
        set $resp_body "";
        body_filter_by_lua '
        local resp_body = string.sub(ngx.arg[1], 1, 1000)
        ngx.ctx.buffered = (ngx.ctx.buffered or"") .. resp_body
        if ngx.arg[2] then
        ngx.var.resp_body = ngx.ctx.buffered
        end
        ';

        location / {
            proxy_pass http://127.0.0.1:8080;
            proxy_redirect off ;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header REMOTE-HOST $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header User-Agent $http_user_agent;
            proxy_set_header Referer $http_referer;
            client_max_body_size 50m;
            client_body_buffer_size 256k;
            proxy_connect_timeout 300;
            proxy_send_timeout 300;
            proxy_read_timeout 300;
            proxy_next_upstream error timeout invalid_header http_500 http_503 http_404;
            proxy_max_temp_file_size 128m;
            proxy_buffer_size 512k;
            proxy_buffers    16 512k;
            proxy_busy_buffers_size 512k;
            proxy_temp_file_write_size 512k;
        }
    access_log /tmp/faceauth.log main;

    }　　

 啟動Nginx，打印日志，就可以看到相關數據。

 以上，是打印POST數據的一種方法，比較麻煩，下面介紹一種比較簡單的方法：

在日志中添加“$request_body”,由於現實原因，需要添加  escape=json  轉換為json格式

log_format access  escape=json '$remote_addr - $remote_user [$time_local] "$request" - "$request_body" '
                         '"$status" $body_bytes_sent "$http_referer" '
                         '"$http_user_agent" "$http_x_forwarded_for" '
                         '"$upstream_addr" "$upstream_status" "$request_time" "$upstream_response_time" $bytes_sent $request_length';