logstash 处理nginx 错误日志

最新推荐文章于 2024-02-27 19:36:11 发布

scan724

最新推荐文章于 2024-02-27 19:36:11 发布

阅读量2.1k

点赞数 1

CC 4.0 BY-SA版权

分类专栏： Logstash

本文链接：https://blog.youkuaiyun.com/zhaoyangjian724/article/details/52369345

Logstash 专栏收录该内容

97 篇文章 ¥39.90 ¥99.00

订阅专栏

本文介绍如何利用Logstash有效地处理和解析Nginx的日志，特别是错误日志，包括提取关键信息如时间戳、错误级别、客户端地址等。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

2016/08/30 14:52:02 [error] 11325#0: *346 open() "/var/www/zjzc-web-frontEnd/%27%22%2f%3E%3C%2fscript%3E%3Cscript%3Ealert%28%29%3C%2fscript%3E" failed (2: No such file or directory), client: 10.171.246.184, server: localhost, request: "GET /%2527%2522%252f%253E%253C%252fscript%253E%253Cscript%253Ealert%2528%2529%253C%252fscript%253E HTTP/1.1", host: "www.zjcap.cn", referrer: "https://www.zjcap.cn/%2527%2522%252f%253E%253C%252fscript%253E%253Cscript%253Ealert%2528%2529%253C%252fscript%253E"


(?<timestamp>%{YEAR}[./-]%{MONTHNUM}[./-]%{MONTHDAY}[- ]%{TIME}) \[%{LOGLEVEL:severity}\] %{POSINT:pid}#%{NUMBER}: %{GREEDYDATA:errormessage}(?:, client: (?<remote_addr>%{IP}|%{HOSTNAME}))(?:, server: %{IPORHOST:server}?)(?:, request: %{QS:request})?(?:, ups

了解本专栏