Настройка nginx для отправки логов в Graylog
Настройка nginx для отправки логов в Graylog#
log_format в блоке http (обычно в /etc/nginx/nginx.conf):
http {
log_format graylog_json '{ "timestamp": "$time_iso8601", '
'"remote_addr": "$remote_addr", "body_bytes_sent": $body_bytes_sent, '
'"request_time": $request_time, "response_status": $status, '
'"request": "$request", "request_method": "$request_method", '
'"host": "$host", "upstream_cache_status": "$upstream_cache_status", '
'"upstream_addr": "$upstream_addr", '
'"http_x_forwarded_for": "$http_x_forwarded_for", '
'"http_referrer": "$http_referer", '
'"http_user_agent": "$http_user_agent", '
'"http_version": "$server_protocol", "nginx_access": true, '
'"rt": "$request_time", "uct": "$upstream_connect_time", '
'"uht": "$upstream_header_time", "urt": "$upstream_response_time" }';
}
access_log и error_log в блоке server:
server {
access_log syslog:server=10.4.255.133:2514,tag=vdc04nginx graylog_json;
error_log syslog:server=10.4.255.133:2514,facility=local0,tag=vdc04nginx,severity=error warn;
}