THIS IS A TEST INSTANCE. ALL YOUR CHANGES WILL BE LOST!!!!
...
Add a dependency to ivy/ivy.xml
Code Block | ||||
---|---|---|---|---|
| ||||
<dependency org="io.logz.log4j2" name="logzio-log4j2-appender" rev="1.0.13" conf="*->master" /> |
Augment the log4j2.xml configuration
Code Block | ||
---|---|---|
| ||
<?xml version="1.0" encoding="UTF-8"?>
...
<Configuration status="info" name="Nutch" packages="">
...
<Appenders>
<LogzioAppender name="Logzio">
<addHostname>true</addHostname>
<logzioToken>${insert_your_token_here}</logzioToken>
<logzioType>java</logzioType>
<logzioUrl>https://listener.logz.io:8071</logzioUrl>
</LogzioAppender>
...
</Appenders>
<Loggers>
<Root level="info">
<AppenderRef ref="Logzio"/>
...
</Root>
</Loggers>
</Configuration> |
Logging to Splunk Enterprise Server
This demonstrates how to log events to the Splunk HTTP Event Collector or to a TCP input on a Splunk Enterprise instance.
Augment log4j2.xml with the following
Code Block | ||
---|---|---|
| ||
<?xml version="1.0" encoding="UTF-8"?>
...
<Configuration status="info" name="Nutch" packages="">
...
<!-- Define an appender that writes to a TCP socket. We use Log4J's SocketAppender, which
is documented at
https://logging.apache.org/log4j/2.x/manual/appenders.html#SocketAppender
Note that TCP inputs are *not* the same as Splunk's management port.
-->
<Appenders>
<Socket name="socket" host="${insert_splunk_host}" port="${insert_splunk_port}">
<PatternLayout pattern="%p: %m%n" charset="UTF-8"/>
</Socket>
<SplunkHttp name="http-input"
url="${insert_splunk_host}:${insert_splunk_port}"
token="${insert_splunk_token}"
host=""
index=""
source="splunktest"
sourcetype="battlecat"
messageFormat="text"
middleware="HttpEventCollectorUnitTestMiddleware"
batch_size_bytes="0"
batch_size_count="0"
batch_interval="0"
connect_timeout="5000"
disableCertificateValidation="true">
<PatternLayout pattern="%m"/>
</SplunkHttp>
</Appenders>
<Loggers>
<Root level="INFO">
</Root>
<Logger name="splunk.logger" level="info">
<AppenderRef ref="socket"/>
</Logger>
...
<Logger name="splunk.log4j" level="info">
<AppenderRef ref="http-input"/>
</Logger>
</Loggers>
</Configuration> |