mirror of
https://github.com/elastic/logstash.git
synced 2025-04-20 12:47:23 -04:00
5c7d416798
Updates the plain, json and pipeline appenders in default config/log4j2.properties to define a delete rule executed during the rollover strategy, which deletes compressed log archives older than 7 days. Updates the documentation that describe the logging configuration to explain how the rollover file works, how to configure the strategy, in particular how to update to setup space limitation condition on the rollover. Co-authored-by: João Duarte <jsvd@users.noreply.github.com> Co-authored-by: Karen Metts <35154725+karenzone@users.noreply.github.com>
165 lines
8.5 KiB
Properties
165 lines
8.5 KiB
Properties
status = error
|
|
name = LogstashPropertiesConfig
|
|
|
|
appender.console.type = Console
|
|
appender.console.name = plain_console
|
|
appender.console.layout.type = PatternLayout
|
|
appender.console.layout.pattern = [%d{ISO8601}][%-5p][%-25c]%notEmpty{[%X{pipeline.id}]}%notEmpty{[%X{plugin.id}]} %m%n
|
|
|
|
appender.json_console.type = Console
|
|
appender.json_console.name = json_console
|
|
appender.json_console.layout.type = JSONLayout
|
|
appender.json_console.layout.compact = true
|
|
appender.json_console.layout.eventEol = true
|
|
|
|
appender.rolling.type = RollingFile
|
|
appender.rolling.name = plain_rolling
|
|
appender.rolling.fileName = ${sys:ls.logs}/logstash-plain.log
|
|
appender.rolling.filePattern = ${sys:ls.logs}/logstash-plain-%d{yyyy-MM-dd}-%i.log.gz
|
|
appender.rolling.policies.type = Policies
|
|
appender.rolling.policies.time.type = TimeBasedTriggeringPolicy
|
|
appender.rolling.policies.time.interval = 1
|
|
appender.rolling.policies.time.modulate = true
|
|
appender.rolling.layout.type = PatternLayout
|
|
appender.rolling.layout.pattern = [%d{ISO8601}][%-5p][%-25c]%notEmpty{[%X{pipeline.id}]}%notEmpty{[%X{plugin.id}]} %m%n
|
|
appender.rolling.policies.size.type = SizeBasedTriggeringPolicy
|
|
appender.rolling.policies.size.size = 100MB
|
|
appender.rolling.strategy.type = DefaultRolloverStrategy
|
|
appender.rolling.strategy.max = 30
|
|
appender.rolling.strategy.action.type = Delete
|
|
appender.rolling.strategy.action.basepath = ${sys:ls.logs}
|
|
appender.rolling.strategy.action.condition.type = IfFileName
|
|
appender.rolling.strategy.action.condition.glob = logstash-plain-*
|
|
appender.rolling.strategy.action.condition.nested_condition.type = IfLastModified
|
|
appender.rolling.strategy.action.condition.nested_condition.age = 7D
|
|
appender.rolling.avoid_pipelined_filter.type = PipelineRoutingFilter
|
|
|
|
appender.json_rolling.type = RollingFile
|
|
appender.json_rolling.name = json_rolling
|
|
appender.json_rolling.fileName = ${sys:ls.logs}/logstash-json.log
|
|
appender.json_rolling.filePattern = ${sys:ls.logs}/logstash-json-%d{yyyy-MM-dd}-%i.log.gz
|
|
appender.json_rolling.policies.type = Policies
|
|
appender.json_rolling.policies.time.type = TimeBasedTriggeringPolicy
|
|
appender.json_rolling.policies.time.interval = 1
|
|
appender.json_rolling.policies.time.modulate = true
|
|
appender.json_rolling.layout.type = JSONLayout
|
|
appender.json_rolling.layout.compact = true
|
|
appender.json_rolling.layout.eventEol = true
|
|
appender.json_rolling.policies.size.type = SizeBasedTriggeringPolicy
|
|
appender.json_rolling.policies.size.size = 100MB
|
|
appender.json_rolling.strategy.type = DefaultRolloverStrategy
|
|
appender.json_rolling.strategy.max = 30
|
|
appender.json_rolling.strategy.action.type = Delete
|
|
appender.json_rolling.strategy.action.basepath = ${sys:ls.logs}
|
|
appender.json_rolling.strategy.action.condition.type = IfFileName
|
|
appender.json_rolling.strategy.action.condition.glob = logstash-json-*
|
|
appender.json_rolling.strategy.action.condition.nested_condition.type = IfLastModified
|
|
appender.json_rolling.strategy.action.condition.nested_condition.age = 7D
|
|
appender.json_rolling.avoid_pipelined_filter.type = PipelineRoutingFilter
|
|
|
|
appender.routing.type = PipelineRouting
|
|
appender.routing.name = pipeline_routing_appender
|
|
appender.routing.pipeline.type = RollingFile
|
|
appender.routing.pipeline.name = appender-${ctx:pipeline.id}
|
|
appender.routing.pipeline.fileName = ${sys:ls.logs}/pipeline_${ctx:pipeline.id}.log
|
|
appender.routing.pipeline.filePattern = ${sys:ls.logs}/pipeline_${ctx:pipeline.id}.%i.log.gz
|
|
appender.routing.pipeline.layout.type = PatternLayout
|
|
appender.routing.pipeline.layout.pattern = [%d{ISO8601}][%-5p][%-25c] %m%n
|
|
appender.routing.pipeline.policy.type = SizeBasedTriggeringPolicy
|
|
appender.routing.pipeline.policy.size = 100MB
|
|
appender.routing.pipeline.strategy.type = DefaultRolloverStrategy
|
|
appender.routing.pipeline.strategy.max = 30
|
|
appender.routing.pipeline.strategy.action.type = Delete
|
|
appender.routing.pipeline.strategy.action.basepath = ${sys:ls.logs}
|
|
appender.routing.pipeline.strategy.action.condition.type = IfFileName
|
|
appender.routing.pipeline.strategy.action.condition.glob = pipeline_${ctx:pipeline.id}*.log.gz
|
|
appender.routing.pipeline.strategy.action.condition.nested_condition.type = IfLastModified
|
|
appender.routing.pipeline.strategy.action.condition.nested_condition.age = 7D
|
|
|
|
rootLogger.level = ${sys:ls.log.level}
|
|
rootLogger.appenderRef.console.ref = ${sys:ls.log.format}_console
|
|
rootLogger.appenderRef.rolling.ref = ${sys:ls.log.format}_rolling
|
|
rootLogger.appenderRef.routing.ref = pipeline_routing_appender
|
|
|
|
# Slowlog
|
|
|
|
appender.console_slowlog.type = Console
|
|
appender.console_slowlog.name = plain_console_slowlog
|
|
appender.console_slowlog.layout.type = PatternLayout
|
|
appender.console_slowlog.layout.pattern = [%d{ISO8601}][%-5p][%-25c] %m%n
|
|
|
|
appender.json_console_slowlog.type = Console
|
|
appender.json_console_slowlog.name = json_console_slowlog
|
|
appender.json_console_slowlog.layout.type = JSONLayout
|
|
appender.json_console_slowlog.layout.compact = true
|
|
appender.json_console_slowlog.layout.eventEol = true
|
|
|
|
appender.rolling_slowlog.type = RollingFile
|
|
appender.rolling_slowlog.name = plain_rolling_slowlog
|
|
appender.rolling_slowlog.fileName = ${sys:ls.logs}/logstash-slowlog-plain.log
|
|
appender.rolling_slowlog.filePattern = ${sys:ls.logs}/logstash-slowlog-plain-%d{yyyy-MM-dd}-%i.log.gz
|
|
appender.rolling_slowlog.policies.type = Policies
|
|
appender.rolling_slowlog.policies.time.type = TimeBasedTriggeringPolicy
|
|
appender.rolling_slowlog.policies.time.interval = 1
|
|
appender.rolling_slowlog.policies.time.modulate = true
|
|
appender.rolling_slowlog.layout.type = PatternLayout
|
|
appender.rolling_slowlog.layout.pattern = [%d{ISO8601}][%-5p][%-25c] %m%n
|
|
appender.rolling_slowlog.policies.size.type = SizeBasedTriggeringPolicy
|
|
appender.rolling_slowlog.policies.size.size = 100MB
|
|
appender.rolling_slowlog.strategy.type = DefaultRolloverStrategy
|
|
appender.rolling_slowlog.strategy.max = 30
|
|
|
|
appender.json_rolling_slowlog.type = RollingFile
|
|
appender.json_rolling_slowlog.name = json_rolling_slowlog
|
|
appender.json_rolling_slowlog.fileName = ${sys:ls.logs}/logstash-slowlog-json.log
|
|
appender.json_rolling_slowlog.filePattern = ${sys:ls.logs}/logstash-slowlog-json-%d{yyyy-MM-dd}-%i.log.gz
|
|
appender.json_rolling_slowlog.policies.type = Policies
|
|
appender.json_rolling_slowlog.policies.time.type = TimeBasedTriggeringPolicy
|
|
appender.json_rolling_slowlog.policies.time.interval = 1
|
|
appender.json_rolling_slowlog.policies.time.modulate = true
|
|
appender.json_rolling_slowlog.layout.type = JSONLayout
|
|
appender.json_rolling_slowlog.layout.compact = true
|
|
appender.json_rolling_slowlog.layout.eventEol = true
|
|
appender.json_rolling_slowlog.policies.size.type = SizeBasedTriggeringPolicy
|
|
appender.json_rolling_slowlog.policies.size.size = 100MB
|
|
appender.json_rolling_slowlog.strategy.type = DefaultRolloverStrategy
|
|
appender.json_rolling_slowlog.strategy.max = 30
|
|
|
|
logger.slowlog.name = slowlog
|
|
logger.slowlog.level = trace
|
|
logger.slowlog.appenderRef.console_slowlog.ref = ${sys:ls.log.format}_console_slowlog
|
|
logger.slowlog.appenderRef.rolling_slowlog.ref = ${sys:ls.log.format}_rolling_slowlog
|
|
logger.slowlog.additivity = false
|
|
|
|
logger.licensereader.name = logstash.licensechecker.licensereader
|
|
logger.licensereader.level = error
|
|
|
|
# Silence http-client by default
|
|
logger.apache_http_client.name = org.apache.http
|
|
logger.apache_http_client.level = fatal
|
|
|
|
# Deprecation log
|
|
appender.deprecation_rolling.type = RollingFile
|
|
appender.deprecation_rolling.name = deprecation_plain_rolling
|
|
appender.deprecation_rolling.fileName = ${sys:ls.logs}/logstash-deprecation.log
|
|
appender.deprecation_rolling.filePattern = ${sys:ls.logs}/logstash-deprecation-%d{yyyy-MM-dd}-%i.log.gz
|
|
appender.deprecation_rolling.policies.type = Policies
|
|
appender.deprecation_rolling.policies.time.type = TimeBasedTriggeringPolicy
|
|
appender.deprecation_rolling.policies.time.interval = 1
|
|
appender.deprecation_rolling.policies.time.modulate = true
|
|
appender.deprecation_rolling.layout.type = PatternLayout
|
|
appender.deprecation_rolling.layout.pattern = [%d{ISO8601}][%-5p][%-25c]%notEmpty{[%X{pipeline.id}]}%notEmpty{[%X{plugin.id}]} %m%n
|
|
appender.deprecation_rolling.policies.size.type = SizeBasedTriggeringPolicy
|
|
appender.deprecation_rolling.policies.size.size = 100MB
|
|
appender.deprecation_rolling.strategy.type = DefaultRolloverStrategy
|
|
appender.deprecation_rolling.strategy.max = 30
|
|
|
|
logger.deprecation.name = org.logstash.deprecation, deprecation
|
|
logger.deprecation.level = WARN
|
|
logger.deprecation.appenderRef.deprecation_rolling.ref = deprecation_plain_rolling
|
|
logger.deprecation.additivity = false
|
|
|
|
logger.deprecation_root.name = deprecation
|
|
logger.deprecation_root.level = WARN
|
|
logger.deprecation_root.appenderRef.deprecation_rolling.ref = deprecation_plain_rolling
|
|
logger.deprecation_root.additivity = false
|