Spring集成Rabbitmq收集Logback日志，利用進行Logstash數據整理存儲到Elasticsearch中

項目中我們常用的是把Logback打印的日志存儲到文件中保存到硬盤上，這樣不利於日志的收集和分析。

以下演示在SpringBoot中通過rabbitmq收集logback日志存儲到Elasticsearch中。

環境准備：安裝RabbitMQ，安裝Elasticsearch和Elasticsearch-Head(可視化插件)，安裝Logstash.====》之前博客已經介紹過了。

pom.xml

引入spring-amqp

<dependency>
    <groupId>org.springframework.amqp</groupId>
    <artifactId>spring-rabbit</artifactId>
</dependency>
<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-amqp</artifactId>
</dependency>

 

logback-spring.xml

<!--logback日志寫入rabbitmq -->
    <appender name="RabbitMq"
        class="org.springframework.amqp.rabbit.logback.AmqpAppender">
        <layout>
            <pattern><![CDATA[ %d %p %t [%c] - <%m>%n ]]></pattern>
        </layout>
        <!--rabbitmq地址 -->
        <addresses>localhost:5672</addresses>
        <abbreviation>36</abbreviation>
        <includeCallerData>true</includeCallerData>
        <applicationId>bootsis</applicationId>
        <username>springcloud</username>
        <password>123456</password>
        <!--路郵件 -->
        <!--{applicationId}  -->
        <!--%property{applicationId}.%c.%p 收集不到日志  -->
        <!--最后改為精確匹配了  非常重要 -->
        <routingKeyPattern>bootsis</routingKeyPattern>
        <generateId>true</generateId>
        <charset>UTF-8</charset>
        <durable>true</durable>
        <deliveryMode>NON_PERSISTENT</deliveryMode>
        <declareExchange>true</declareExchange>
        <autoDelete>false</autoDelete>
    </appender>

   <root level="INFO">
        <appender-ref ref="STDOUT" />
        <appender-ref ref="INFO_FILE" />
        <appender-ref ref="WARN_FILE" />
        <appender-ref ref="ERROR_FILE" />
        <!--這塊也要添加-->
        <appender-ref ref="RabbitMq" /> 
    </root>

 

Logstash配置

在logstash安裝目錄的bin目錄下新建

logstash-rabbitmq.conf   ====>從消息隊列讀日志

配置如下，logstash整合rabbitmq詳細配置見https://www.elastic.co/guide/en/logstash/current/plugins-inputs-rabbitmq.html

input { 
   rabbitmq {
       type =>"all"
       durable => true
       exchange => "logs"
	   exchange_type => "topic"
	   key => "bootsis"
	   host => "localhost"
	   port => 5672
	   user => "springcloud"
	   password => "123456"
	   queue => "boot-sis-mq"
       auto_delete => false
    
  }	
 }

output {
  elasticsearch { 
       hosts => ["localhost:9200"] 
	   index => "bootsis_log_mq"
	   }
}

額外：從文件目錄讀日志

input { 
   file {
     type => "server"
     path  =>["E:\home\logs\boot\info.log","E:\home\logs\boot\error.log","E:\home\logs\boot\trace.log","E:\home\logs\boot\warn.log"]
  }
 }

output {
  elasticsearch { 
       hosts => ["localhost:9200"] 
	   index => "bootsis_log"
	   }
}

以上配置完成，啟動rabbitmq,logstash(logstash -f logstash-rabbitmq.conf),elasticsearch,elasticsearch-head,springboot項目。

控制台一直在打印日志

​

訪問http://localhost:9100/

​

rabbitmq消息狀態 

​

后期也可以整合Kinbana

​

     

微信公眾號

                           ​