Kibana 以 JSON 格式记录到 Syslog

Question

我今天扩展了一个 ELK 堆栈并且一切正常，但出于某种原因，Kibana 将它自己的消息以 JSON 格式记录到系统日志中。例如：

Oct 19 18:49:28 elk-host kibana[11111]: {"type":"response","@timestamp":"2016-10-19T17:49:28+00:00","tags":[],"pid":22749,"method":"post","statusCode":200,"req":{"url":"/elasticsearch/logstash*/_field_stats?level=indices","method":"post","headers":{"host":"1.2.3.4:5601","connection":"keep-alive","content-length":"178","accept":"application/json, text/plain, */*","origin":"http://1.2.3.4:5601","kbn-version":"4.4.2","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36","content-type":"application/json;charset=UTF-8","referer":"http://1.2.3.4:5601/app/kibana","accept-encoding":"gzip, deflate","accept-language":"en-US,en;q=0.8"},"remoteAddress":"5.6.7.8","userAgent":"5.6.7.8","referer":"http://1.2.3.4:5601/app/kibana"},"res":{"statusCode":200,"responseTime":11,"contentLength":9},"message":"POST /elasticsearch/logstash*/_field_stats?level=indices 200 11ms - 9.0B"}

所有其他日志都是正常格式

这是故意的还是我错过了某个地方的 Kibana 设置？

如果这是故意的，我可能会添加一个系统日志过滤器来正确记录它......但希望我不必

Answer 1

在 Kibana 配置文件中（在 config/kibana.yml 中）您可以添加以下（未记录的）设置：

logging.json: false

并且您的 Kibana 日志将不再被格式化为 JSON。

Kibana 以 JSON 格式记录到 Syslog

Kibana logs to Syslog in JSON format

logging

syslog

kibana