ELK Stack

Thu, 19 Apr 2018 21:52:00 +0000

References

Usage

Get Docker ELK Stack

Bringing up the stack

Copy

`1`	`$ docker-compose up`

Initial setup

Default Kibana index pattern creation

Create an index pattern via the Kibana API:

Copy

curl -XPOST -D- 'http://localhost:5601/api/saved_objects/index-pattern' -H 'Content-Type: application/json' -H 'kbn-version: 6.2.3' -d '{"attributes":{"title":"logstash-*","timeFieldName":"@timestamp"}}'

Logback setup

pom dependencies

Logback

Mon, 05 Mar 2018 18:06:00 +0000

RollingFileAppender

Copy

<appender name="rollingFileAppender" class="ch.qos.logback.core.rolling.RollingFileAppender">
  <file>/Users/dev/Desktop/logging/logback.log</file>

  <rollingPolicy class="ch.qos.logback.core.rolling.SizeAndTimeBasedRollingPolicy">
    <!-- rollover daily -->
    <fileNamePattern>/Users/dev/Desktop/logging/logback.%d{yyyy-MM-dd}.%i.log</fileNamePattern>

    <!-- each file should be at most 100MB, keep 60 days worth of history, but at most 20GB -->
    <maxFileSize>100MB</maxFileSize>
    <maxHistory>60</maxHistory>
    <totalSizeCap>20GB</totalSizeCap>
  </rollingPolicy>

  <encoder>
      <pattern>%d{HH:mm:ss.SSS} >> %-3relative [%thread] %-5level	%logger{25} - %msg%n</pattern>
  </encoder>
</appender>

DBAppender with JNDI

Copy

<appender name="databaseAppender" class="ch.qos.logback.classic.db.DBAppender">
  <connectionSource class="ch.qos.logback.core.db.JNDIConnectionSource">
    <jndiLocation>jdbc/pingerbee</jndiLocation>
  </connectionSource>
</appender>

Log Management on ARI Systems

ELK Stack

References

Usage

Get Docker ELK Stack

Bringing up the stack

Initial setup

Default Kibana index pattern creation

Logback setup

Logback

RollingFileAppender

DBAppender with JNDI