housekeep-promtail-config-for-nginx #16

Merged
kazu634 merged 2 commits from housekeep-promtail-config-for-nginx into main 2024-04-03 07:32:24 +00:00
2 changed files with 0 additions and 91 deletions

View File

@ -1,12 +0,0 @@
[Unit]
Description=Grafana Promtail (nginx)
Documentation=https://github.com/grafana/loki
After=network-online.target
[Service]
User=root
Restart=always
ExecStart=/usr/local/bin/promtail --config.file=/etc/promtail/nginx.yaml
[Install]
WantedBy=multi-user.target

View File

@ -1,79 +0,0 @@
server:
disable: true
positions:
filename: /var/opt/promtail/promtail_nginx_position.yaml
clients:
- url: http://<%= @LOKIENDPOINT %>/loki/api/v1/push
scrape_configs:
- job_name: nginx-access
static_configs:
- targets:
- localhost
labels:
job: nginx
hostname: <%= @HOSTNAME %>
__path__: /var/log/nginx/*access.log
pipeline_stages:
- match:
selector: '{job="nginx"}'
stages:
- regex:
expression: "^time:(?P<timestamp>[^\t]+)\thost:(?P<host>[^\t]+)\tforwardedfor:(?P<forwardedfor>[^\t]+)\tmethod:(?P<method>[^\t]+)\tpath:(?P<path>[^\t]+)\tprotocol:(?P<protocol>[^\t]+)\tstatus:(?P<status>[^\t]+)\tsize:(?P<size>[^\t]+)\treferer:(?P<referer>[^\t]+)\tua:(?P<ua>[^\t]+)\ttaken_sec:(?P<taken_sec>[^\t]+)\tbackend:(?P<backend>[^\t]+)\tbackend_status:(?P<backend_status>[^\t]+)\tcache:(?P<cache>[^\t]+)\tbackend_runtime:(?P<backend_runtime>[^\t]+)\tvhost:(?P<vhost>[^\t]+)$"
- timestamp:
source: timestamp
format: 02/Jan/2006:15:04:05 -0700
- template:
source: level
template: '{{ .status }}'
- template:
source: level
template: '{{ regexReplaceAllLiteral "(1|2|3)[0-9]+" .Value "info" }}'
- template:
source: level
template: '{{ regexReplaceAllLiteral "4[0-9]+" .Value "warning" }}'
- template:
source: level
template: '{{ regexReplaceAllLiteral "5[0-9]+" .Value "error" }}'
- labels:
hostname:
level:
vhost:
- job_name: nginx-error
static_configs:
- targets:
- localhost
labels:
job: nginx
hostname: <%= @HOSTNAME %>
level: error
__path__: /var/log/nginx/*error.log
pipeline_stages:
- match:
selector: '{job="nginx"}'
stages:
- regex:
expression: '^(?P<timestamp>[0-9\/]+ [0-9:]+) \[(?P<level>[^ ]+)\] (?P<message>.+), host: "(?P<vhost>[^"]+)"(?P<rest>.*)$'
- timestamp:
source: timestamp
format: 2006/01/02 15:04:05
location: Asia/Tokyo
- labels:
vhost:
- output:
source: message