Spring集成Rabbitmq收集Logback日志，利用进行Logstash数据整理存储到Elasticsearch中

项目中我们常用的是把Logback打印的日志存储到文件中保存到硬盘上，这样不利于日志的收集和分析。

以下演示在SpringBoot中通过rabbitmq收集logback日志存储到Elasticsearch中。

环境准备：安装RabbitMQ，安装Elasticsearch和Elasticsearch-Head(可视化插件)，安装Logstash.====》之前博客已经介绍过了。

pom.xml

引入spring-amqp

<dependency>
	<groupId>org.springframework.amqp</groupId>
	<artifactId>spring-rabbit</artifactId>
</dependency>
<dependency>
	<groupId>org.springframework.boot</groupId>
	<artifactId>spring-boot-starter-amqp</artifactId>
</dependency>

logback-spring.xml

<!--logback日志写入rabbitmq -->
	<appender name="RabbitMq"
		class="org.springframework.amqp.rabbit.logback.AmqpAppender">
		<layout>
			<pattern><![CDATA[ %d %p %t [%c] - <%m>%n ]]></pattern>
		</layout>
		<!--rabbitmq地址 -->
		<addresses>localhost:5672</addresses>
		<abbreviation>36</abbreviation>
		<includeCallerData>true</includeCallerData>
		<applicationId>bootsis</applicationId>
		<username>springcloud</username>
		<password>123456</password>
		<!--路邮件 -->
		<!--{applicationId}  -->
		<!--%property{applicationId}.%c.%p 收集不到日志  -->
		<!--最后改为精确匹配了  非常重要 -->
		<routingKeyPattern>bootsis</routingKeyPattern>
		<generateId>true</generateId>
		<charset>UTF-8</charset>
		<durable>true</durable>
		<deliveryMode>NON_PERSISTENT</deliveryMode>
		<declareExchange>true</declareExchange>
		<autoDelete>false</autoDelete>
	</appender>

   <root level="INFO">
		<appender-ref ref="STDOUT" />
		<appender-ref ref="INFO_FILE" />
		<appender-ref ref="WARN_FILE" />
		<appender-ref ref="ERROR_FILE" />
        <!--这块也要添加-->
        <appender-ref ref="RabbitMq" /> 
	</root>

Logstash配置

在logstash安装目录的bin目录下新建

logstash-rabbitmq.conf   ====>从消息队列读日志

配置如下，logstash整合rabbitmq详细配置见https://www.elastic.co/guide/en/logstash/current/plugins-inputs-rabbitmq.html

input { 
   rabbitmq {
       type =>"all"
       durable => true
       exchange => "logs"
	   exchange_type => "topic"
	   key => "bootsis"
	   host => "localhost"
	   port => 5672
	   user => "springcloud"
	   password => "123456"
	   queue => "boot-sis-mq"
       auto_delete => false
    
  }	
 }

output {
  elasticsearch { 
       hosts => ["localhost:9200"] 
	   index => "bootsis_log_mq"
	   }
}

额外：从文件目录读日志

input { 
   file {
     type => "server"
     path  =>["E:\home\logs\boot\info.log","E:\home\logs\boot\error.log","E:\home\logs\boot\trace.log","E:\home\logs\boot\warn.log"]
  }
 }

output {
  elasticsearch { 
       hosts => ["localhost:9200"] 
	   index => "bootsis_log"
	   }
}

以上配置完成，启动rabbitmq,logstash(logstash -f logstash-rabbitmq.conf),elasticsearch,elasticsearch-head,springboot项目。

控制台一直在打印日志

访问http://localhost:9100/

rabbitmq消息状态 

后期也可以整合Kinbana

                                           

                                                                       JAVA程序猿成长之路

                                                    分享学习资源，学习方法，记录程序员生活。