Logstash TCPSocketAppender 由于环形缓冲区达到最大容量而丢弃所有日志 [8192]

Question

从示例应用程序发送日志时，所有日志都丢失并出现以下错误： 00:06:57,103 |-net.logstash.logback.appender.LogstashTcpSocketAppender[tcp-logstash] 中的 WARN - 由于 ring buf 而丢弃了 129001 个事件（并且还在计数...）最大容量 [8192]

在 logback.xml 文件中将缓冲区大小增加到“32768”，但是没有成功。以最大容量显示新的新缓冲区大小时出现相同的错误[32768]

N.B：我可以使用 log4j2 TcpSocketAppender 发送同一组日志，没有任何问题。

Answer 1

尝试添加一个 ShortenedThrowableConverter，

import net.logstash.logback.appender.LogstashTcpSocketAppender;
import net.logstash.logback.encoder.LogstashEncoder;
import net.logstash.logback.stacktrace.ShortenedThrowableConverter;

ShortenedThrowableConverter throwableConverter = new ShortenedThrowableConverter();
throwableConverter.setRootCauseFirst(true);
LogstashEncoder encoder = new LogstashEncoder();
encoder.setThrowableConverter(throwableConverter);

在 xml

            <throwableConverter class="net.logstash.logback.stacktrace.ShortenedThrowableConverter">
                <maxDepthPerThrowable>20</maxDepthPerThrowable>
                <maxLength>1000</maxLength>
                <shortenedClassNameLength>30</shortenedClassNameLength>
                <rootCauseFirst>true</rootCauseFirst>
                <exclude>excluded1</exclude>
                <exclude>excluded2</exclude>
                <inlineHash>true</inlineHash>
            </throwableConverter>

Logstash TCPSocketAppender 由于环形缓冲区达到最大容量而丢弃所有日志 [8192]

Logstash TCPSocketAppender dropping all logs due to ring buffer at max capacity [8192]

logstash

elastic-stack