關於ELK的安裝你們能夠參考ubuntu18 docker中部署ELK 和 caas/docker-elk ,html
首先須要在ELK中建立一個index patternsgit
首先咱們建立一個aspnetcore webapi項目github
1.添加以下引用:web
Serilog
Serilog.Sinks.ElasticSearch
Serilog.Extensions.Logging
2.修改appsettings.json文件:docker
{ "Logging": { "LogLevel": { "Default": "Information", "System": "Information", "Microsoft": "Information" } }, "AllowedHosts": "*", "ElasticConfiguration": { "Uri": "http://192.168.100.5:5000/" } }
3.修改Startup.cs文件json
public Startup(IConfiguration configuration) { Configuration = configuration; var elasticUri = Configuration["ElasticConfiguration:Uri"]; Log.Logger = new LoggerConfiguration().Enrich.FromLogContext().MinimumLevel.Debug() .WriteTo.Elasticsearch( new ElasticsearchSinkOptions(new Uri(elasticUri)) { MinimumLogEventLevel=LogEventLevel.Information,AutoRegisterTemplate=true, }) .CreateLogger(); } public void ConfigureServices(IServiceCollection services) { services.AddLogging(loggingBuilder => loggingBuilder.AddSerilog(dispose: true)); services.AddMvc().SetCompatibilityVersion(CompatibilityVersion.Version_2_1); }
4.修改controller:ubuntu
ILogger<ValuesController> _logger; public ValuesController(ILogger<ValuesController> logger) { _logger = logger; } [HttpGet] public ActionResult<IEnumerable<string>> Get() { _logger.LogInformation($"oh hai there! : {DateTime.UtcNow}"); try { throw new Exception("oops. i haz cause error in UR codez."); } catch (Exception ex) { _logger.LogCritical("ur app haz critical error", ex); _logger.LogError(ex, "ur code iz buggy."); } return new string[] { "value1", "value2" }; }
5.運行項目而後在elk中驗證api
備註:網上關於elk的地址都是http://xxx:9200 (elasticsearch地址), 我在測試的時候發現怎麼都沒有寫入到elk,後來改成5000(Logstash的地址)就行了app
參考:elasticsearch