Page History

log4j.rootLogger=INFO, SYSLOG
log4j.logger.org.apache.eagle.executor.AlertExecutor=DEBUG

# Syslog Appender

log4j.appender.SYSLOG=org.apache.log4j.net.SyslogAppender
log4j.appender.SYSLOG.syslogHost=splunk-3873.phx01.dev.ebayc3.com<syslog_server_hostname>
log4j.appender.SYSLOG.layout=org.apache.log4j.PatternLayout
log4j.appender.SYSLOG.layout.conversionPattern=%-4r [%t] %-5p %c %x - %m%n
log4j.appender.SYSLOG.Facility=LOCAL0

Add syslog config to filter & store eagle alert log

:msg, !contains, "A new alert is triggered: " ~

local0.* /home/eagle/eagle.alert.log

After the following configuration, the following eagle log will be persisted in file located at /home/eagle/eagle.alert.log

if(LOG.isDebugEnabled()) LOG.debug("A new alert is triggered: "+alertExecutorId + ", partition " + partitionSeq + ", Got an alert with output context: " + entity.getAlertContext() + ", for policy " + evaluator);