看了ELK有段時間了，也把日志格式全都規整成JSON格式了，但看了很多所謂的教程還是不會寫，網上找到的都是你抄我，我抄你，都是抄來抄去的，每一個有用的。
比如，比如，我日志全都規整成了這樣的格式：（本來是一行一個日志，為了看的清楚，我調整了下格式，共四個日志樣例），這樣的組態檔要怎么寫呢？（日志我先保存到了檔案，用的log4cplus，每天一個檔案名字）
[2018-09-05 00:00:00.467] --- 日志記錄時間，下同
{
"pktype":"gwrx", --- 包型別，下同，四種包型別
"eui":"6073bc0002100012", --- 識別符號
"payload": --- 內容
{
"tmst":333974364,
"nsrecvtime":"2018-9-5 00:00:00:458",
"freq":483.50,
"datar":"SF9BW125",
"coder":"4/5",
"rssi":-95,
"snr":10.2,
"frame":
{
"type":"JoinReq",
"payloadlen":23,
"toa":206000
}
}
}
[2018-09-05 00:01:32.069]
{
"pktype":"gwtx",
"eui":"6073bc0002100012",
"payload":
{
"mote":"004a770153000003",
"downtype":"A",
"tmst":17606746620,
"freq":502.50,
"datar":"SF12BW125",
"coder":"4/5",
"rx":2,
"frame":
{
"type":"Down-UnCfm",
"payloadlen":0,
"toa":1156000
}
}
}
[2018-09-05 00:01:32.069]
{
"pktype":"moterx",
"eui":"004a770153000003",
"payload":
{
"devaddr":"c80017d9",
"downtype":"A",
"appeui":"2c26c50065000035",
"freq":502.50,
"datar":"SF12BW125",
"coder":"4/5",
"rx":2,
"gweui":"6073bc0002100012",
"frame":
{
"type":"Down-UnCfm",
"fctl":
{
"adr":1,
"ack":1,
"fpend":0,
"optlen":0
},
"fcnt":63204,
"fport":255,
"payloadlen":0,
"toa":1156000
}
}
}
[2018-09-05 00:01:00.401]
{
"pktype":"motetx",
"eui":"004a770019000001",
"payload":
{
"devaddr":"c800012b",
"nsrecvtime":"2018-9-5 00:00:59:689",
"appeui":"004a770019000001",
"freq":488.30,
"datar":"SF12BW125",
"coder":"4/5",
"recvgwcount":1,
"gwlist":
[
{
"gweui":"6073bc0001000066",
"rssi":-110,
"snr":1.5
}
],
"frame":
{
"type":"JoinReq",
"payloadlen":23,
"toa":1483000
}
}
}
轉載請註明出處，本文鏈接：https://www.uj5u.com/shujuku/81775.html
標籤：其他數據庫
上一篇：myql客戶端正在執行mysql_query時，斷開網路，出現阻塞
下一篇：感覺臟讀違反了事務的隔離性，請教