fix: filebeat 日志打印

filebeat.yml

@@ -9,6 +9,10 @@ filebeat.inputs:
   paths:
     - /Users/shaoxingye/Documents/WORK/ownerproject/message-call-service/logs/*.log
 
+  json.keys_under_root: true
+  json.overwrite_keys: true
+
+
 
 # ============================== Filebeat modules ==============================
 
@@ -40,12 +44,8 @@ setup.kibana:
 
 # ================================= Processors =================================
 processors:
-   - decode_json_fields:
-        fields: ['message'] #要进行解析的字段
-        target: "" #json内容解析到指定的字段，如果为空（“”），则解析到顶级结构下
-        overwrite_keys: false #如果解析出的json结构中某个字段在原始的event（在filebeat中传输的一条数据为一个event）中也存在，是否覆盖event中该字段的值，默认值:false
-        process_array: false #数组是否解码，默认值:false
-        max_depth: 1 #解码深度，默认值：1
+   - drop_fields:
+      fields: ["ecs","input","agent"]
 
 
 

utils/logger.js

@@ -2,8 +2,11 @@ import { createLogger, format, transports } from 'winston';
 import 'winston-daily-rotate-file';
 import { getNamespace } from 'cls-hooked';
 import os from 'os'
+import moment from 'moment';
+import path from "path"
+
 const myFormat = format.printf(({ level, message, timestamp, requestId }) => {
-  return `[${timestamp}] [${level}] ${requestId ? ("[" + requestId + "] :") : ''} ${message}`;
+  return `[${moment(timestamp).format("YYYY-MM-DD hh:mm:ss.SSS")}] [${level}] ${requestId ? ("[" + requestId + "] :") : ''} ${message}`;
 });
 
 const requestId = format((info) => {
@@ -13,11 +16,12 @@ const requestId = format((info) => {
   if (!requestId && Object.prototype.toString.call(message) === "[object Object]" && message.requestId) {
     requestId = message.requestId
   }
+  if (Object.prototype.toString.call(message) === "[object Object]") {
+    info.message = JSON.stringify(message)
+  }
   info.requestId = requestId || '-'
-  info.message = JSON.stringify(message)
   return info
 })
-import path from "path"
 
 const logger = createLogger({
   level: 'info',