laravel log system with logstash

Question

我有一个laravel应用程序，我想将日志存储到我的logstash中，并在基巴纳(Kibana(看到它们，我在网上搜索了很多东西，以找到解决方案，但我没有找到任何好的。来源，是否有任何包装将Laravel Logs使用到LogStash中？？？顺便说一句，我的logstash和kibana毫无问题地运行，我现在只需要一个数据源。这是我运行的Elstic搜索：

    {
name: "5351ced3b7a4",
cluster_name: "elasticsearch",
cluster_uuid: "Ej5TRN8CQyGvemZlT3gAFA",
version: {
number: "7.1.1",
build_flavor: "oss",
build_type: "tar",
build_hash: "7a013de",
build_date: "2019-05-23T14:04:00.380842Z",
build_snapshot: false,
lucene_version: "8.0.0",
minimum_wire_compatibility_version: "6.8.0",
minimum_index_compatibility_version: "6.0.0-beta1"
},
tagline: "You Know, for Search"
}

编辑正如答案解释了我的方式，现在我在Laravel中的日志中遇到了此错误：

[2019-08-05 14:16:17] laravel.INFO: Hello logstash!  

编辑：记录配置文件：

<?php
use MonologHandlerStreamHandler;
use MonologHandlerSyslogUdpHandler;
return [
/*
|--------------------------------------------------------------------------
| Default Log Channel
|--------------------------------------------------------------------------
|
| This option defines the default log channel that gets used when writing
| messages to the logs. The name specified in this option should match
| one of the channels defined in the "channels" configuration array.
|
*/
'default' => env('LOG_CHANNEL', 'stack'),
/*
|--------------------------------------------------------------------------
| Log Channels
|--------------------------------------------------------------------------
|
| Here you may configure the log channels for your application. Out of
| the box, Laravel uses the Monolog PHP logging library. This gives
| you a variety of powerful log handlers / formatters to utilize.
|
| Available Drivers: "single", "daily", "slack", "syslog",
|                    "errorlog", "monolog",
|                    "custom", "stack"
|
*/
'channels' => [
    'stack' => [
        'driver' => 'stack',
        'channels' => ['daily'],
        'ignore_exceptions' => false,
    ],
    'single' => [
        'driver' => 'single',
        'path' => storage_path('logs/laravel.log'),
        'level' => 'debug',
    ],
    'daily' => [
        'driver' => 'daily',
        'path' => storage_path('logs/laravel.log'),
        'level' => 'debug',
        'days' => 14,
    ],
    'slack' => [
        'driver' => 'slack',
        'url' => env('LOG_SLACK_WEBHOOK_URL'),
        'username' => 'Laravel Log',
        'emoji' => ':boom:',
        'level' => 'critical',
    ],
    'papertrail' => [
        'driver' => 'monolog',
        'level' => 'debug',
        'handler' => SyslogUdpHandler::class,
        'handler_with' => [
            'host' => env('PAPERTRAIL_URL'),
            'port' => env('PAPERTRAIL_PORT'),
        ],
    ],
    'stderr' => [
        'driver' => 'monolog',
        'handler' => StreamHandler::class,
        'formatter' => env('LOG_STDERR_FORMATTER'),
        'with' => [
            'stream' => 'php://stderr',
        ],
    ],
    'syslog' => [
        'driver' => 'syslog',
        'level' => 'debug',
    ],
    'errorlog' => [
        'driver' => 'errorlog',
        'level' => 'debug',
    ],
    'logstash' => [
        'driver' => 'custom',
        'via'    => AppLogstashLogger::class,
        'host'   => env('LOGSTASH_HOST', '127.0.0.1'),
        'port'   => env('LOGSTASH_PORT', 9200),
    ],
],
];

Answer 1

正如本文中所述的，这很容易做到。

1. 在config/logging.php(文档(中配置记录频道

    'channels' => [
        // ... other channels like stack or single
        'logstash' => [
            'driver' => 'custom',
            'via'    => AppLogstashLogger::class,
            'host'   => env('LOGSTASH_HOST', '127.0.0.1'),
            'port'   => env('LOGSTASH_PORT', 4718),
        ],
    ],

2. 创建自定义记录器工厂(DOC(

namespace App;
use MonologFormatterLogstashFormatter;
use MonologHandlerSocketHandler;
use MonologLogger;
use PsrLogLoggerInterface;
class LogstashLogger {
    /**
     * @param array $config
     * @return LoggerInterface
     */
    public function __invoke(array $config): LoggerInterface
    {
        $handler = new SocketHandler("udp://{$config['host']}:{$config['port']}");
        $handler->setFormatter(new LogstashFormatter(config('app.name')));
        return new Logger('logstash.main', [$handler]);
    }
}

这将使用UDP使用Monolog LogStash Formatter

通过UDP写入日志

3. 现在写日志条目到logstash指定您刚创建的日志记录频道(DOC(

Log::channel('logstash')->info('Hello logstash!');

Answer 2

这对我不起作用，因为UCP套接字连接，而不是调试它，而是将其更改为TCP并起作用。

我首先在命令行上进行了测试：

echo "hello world!" | nc 127.0.0.1 5000

如果那不起作用，则需要更新弹性配置，否则S/UDP/TCP。

$handler = new SocketHandler("tcp://127.0.0.1:5000");
$formatter = new LogstashFormatter('EXAMPLE');
$handler->setFormatter($formatter);
$logger =  new Logger('logstash.main', [$handler]);