akai-tsuki.hatenablog.com の続きです。
設定を変更
line から json へ変更。
# vi /etc/logstash/conf.d/nginx-access_log.conf # cat /etc/logstash/conf.d/nginx-access_log.conf input { file { path => "/var/log/nginx/access.log" } } output { stdout { codec => "json" } } #
Logstashの出力
同じようにabコマンドでアクセスします。
# bin/logstash -f /etc/logstash/conf.d/nginx-access_log.conf Settings: Default pipeline workers: 1 Pipeline main started {"message":"127.0.0.1 - - [01/Jul/2016:07:36:44 +0000] \"GET / HTTP/1.0\" 200 612 \"-\" \"ApacheBench/2.3\" \"-\"","@version":"1","@timestamp":"2016-07-01T07:36:45.023Z","path":"/var/log/nginx/access.log","host":"e0b8c7a1e2cb"}
見やすく
{ "message":"127.0.0.1 - - [01/Jul/2016:07:36:44 +0000] \"GET / HTTP/1.0\" 200 612 \"-\" \"ApacheBench/2.3\" \"-\"", "@version":"1", "@timestamp":"2016-07-01T07:36:45.023Z", "path":"/var/log/nginx/access.log", "host":"e0b8c7a1e2cb" }