审计日志
JAVA
Container 应用
Container Sidecar
Actions
可视化管理
format template
日志处理
K8S node
Kibana
POD共享硬盘网络
埋点日志
系统日志-多模块
webhook
index: index: sys-log-*filter: query: \"fields.project\"
alert_text: \"test 报错 \时 间: {}\模 块: {}\I P: {}\TRACE ID: {}\错误信息: {}\"
Condition:
应用容器
dingtalk_webhook: \"https://oapi.dingtalk.com/robot/send?access_token=xxxxxxxxxxxxxxxx\"dingtalk_msgtype: \"text\"content: \"elk\"
配置规则
Rest api
log agent
Rules
occur within a amount: num_events: 1occur within a timeframe: minutes: 5realert: minutes: 0
Nginx日志
PHP
frequencysilent
MySQL慢查询
alert_text_args:- timestamp- appName- serverIp- traceId- message
ELK Stack
