OK. What is the format?
Ralph
> On Oct 12, 2020, at 10:00 PM, רפי <rafraph@gmail.com> wrote:
>
> I don't have control on the elastic system and it is configured to get the
> data as log files not json.
> My team is responsible for several components and there are other teams
> that are responsible for other components.
> In addition there is an analytics team that is responsible for the elastic
> stack system. They ask all teams to align the components logs to predefined
> format in order to parse all logs in the same way.
> So unfortunately, I can't use json. I just must order my fields in the
> correct order as I asked to.
>
> בתאריך יום ב׳, 12 באוק׳ 2020 ב-23:03 מאת Ralph Goers
<
> ralph.goers@dslextreme.com>:
>
>> If you are sending to Elastic why not use JSON? See
>> http://logging.apache.org/log4j/2.x/manual/cloud.html <
>> http://logging.apache.org/log4j/2.x/manual/cloud.html>.
>>
>> Ralph
>>
>>> On Oct 12, 2020, at 11:49 AM, רפי <rafraph@gmail.com> wrote:
>>>
>>> I tried it and it didn't work. It just print the following text -
>>> "%replace${event:Level}"
>>>
>>> I need it since I must put the log level after the "action" field. This
>> is
>>> needed for other system (elastic stack system) of log analysis.
>>> The problem is that the action field is not available for me in
>> log4j2.xml,
>>> but only in some specific file. On the other hand the log level is not
>>> available for me in the same file where the action field is available.
>>> So of course I can change the code. But I prefer to fix it with
>>> configuration and I thought that I can fix it by using log4j2.xml.
>>>
>>>
>>> בתאריך יום ב׳, 12 באוק׳ 2020 ב-21:36 מאת Ralph Goers
<
>>> ralph.goers@dslextreme.com>:
>>>
>>>> Possibly something like that. As I said, I haven’t had a chance to
>>>> investigate it so I am not sure if interpolation is supported in that
>> exact
>>>> usage.
>>>>
>>>> I do wonder why you need to do it this way though.
>>>>
>>>> Ralph
>>>>
>>>>> On Oct 12, 2020, at 9:31 AM, רפי <rafraph@gmail.com>
wrote:
>>>>>
>>>>> I will try it.
>>>>> Do you mean that I will use the following:
>>>>>
>>>>> %replace{%msg}{LOGLEVEL}$${event:Level}
>>>>>
>>>>> ?
>>>>>
>>>>>
>>>>> בתאריך יום ב׳, 12 באוק׳ 2020 ב-18:35 מאת Ralph
Goers <
>>>>> ralph.goers@dslextreme.com>:
>>>>>
>>>>>> I suspect that using $${event:Level} could be made to work but I
would
>>>>>> have to try it to see what it would take and right now I have been
>>>>>> extremely busy with the $dayjob$.
>>>>>>
>>>>>> Ralph
>>>>>>
>>>>>>> On Oct 12, 2020, at 2:56 AM, רפי <rafraph@gmail.com>
wrote:
>>>>>>>
>>>>>>> In log4j2 configured by log4j2.xml - how can I replace some text
with
>>>>>>> other conversion
>>>>>>> pattern?
>>>>>>>
>>>>>>>
>>>>>>> For example, I have some message with the word "LOGLEVEL" and
I want
>> to
>>>>>>> replace it with the current log level (WARN/DEBUG/ERROR/TRACE/INFO).
>>>> The
>>>>>>> conversion pattern
>>>>>>> <https://logging.apache.org/log4j/2.x/manual/layouts.html>
for the
>> log
>>>>>>> level is %p or %level, so I tried this:
>>>>>>>
>>>>>>> %replace{%msg}{LOGLEVEL}{%level}
>>>>>>>
>>>>>>> But instead of replacing the "LOGLEVEL" text with the actual
*level*
>> it
>>>>>>> just replaced it with the text "%level".
>>>>>>>
>>>>>>> *The original message was*: this trace is LOGLEVEL log
>>>>>>>
>>>>>>> *For INFO trace I want to get*: this trace is INFO log
>>>>>>>
>>>>>>> *But I actually got*: this trace is %level log
>>>>>>>
>>>>>>> How can I achieve this requirement?
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> I asked it on StackOverflow but no one knows the answer.
>>>>>>>
>>>>>>>
>>>>>>
>>>>
>> https://stackoverflow.com/questions/64305649/log4j2-replace-some-text-with-other-log4j2-conversion-pattern-with-level-for
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> Thanks,
>>>>>>>
>>>>>>> Refael
>>>>>>
>>>>>>
>>>>>>
>>>>>> ---------------------------------------------------------------------
>>>>>> To unsubscribe, e-mail: log4j-user-unsubscribe@logging.apache.org
>>>>>> For additional commands, e-mail: log4j-user-help@logging.apache.org
>>>>>>
>>>>>>
>>>>
>>>>
>>>>
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: log4j-user-unsubscribe@logging.apache.org
>>>> For additional commands, e-mail: log4j-user-help@logging.apache.org
>>>>
>>>>
>>
>>
---------------------------------------------------------------------
To unsubscribe, e-mail: log4j-user-unsubscribe@logging.apache.org
For additional commands, e-mail: log4j-user-help@logging.apache.org
|