loki 查询样例

2022-04-26
浏览 (1793)

loki + grafana 搭建的日志系统，通过关键字查询日志的样例。

Log Query examples

Examples that filter on IP address

Return log lines that are not within a range of IPv4 addresses:
```
  {job_name="myapp"} != ip("192.168.4.5-192.168.4.20")
```

This example matches log lines with all IPv4 subnet values 192.168.4.5/16 except IP address 192.168.4.2:

  {job_name="myapp"}
      | logfmt
      | addr = ip("192.168.4.5/16")
      | addr != ip("192.168.4.2")

Examples that aid in security evaluation

Extract the user and IP address of failed logins from Linux /var/log/secure

  {job="security"} 
      |~ "Invalid user.*"
      | regexp "(^(?P<user>\\S+ {1,2}){8})"
      | regexp "(^(?P<ip>\\S+ {1,2}){10})"
      | line_format "IP = {{.ip}}\tUSER = {{.user}}"

Get successful logins from Linux /var/log/secure

  {job="security"}
      != "grafana_com"
      |= "session opened"
      != "sudo: "
      |regexp "(^(?P<user>\\S+ {1,2}){11})"
      | line_format "USER = {{.user}}"

Metrics Query examples

Return the per-second rate of all non-timeout errors
within the last minutes per host for the MySQL job,
and only include errors whose duration is above ten seconds.
```
  sum by (host) (rate({job="mysql"}
      |= "error" != "timeout"
      | json
      | duration > 10s [1m]))
```

更多文档参考：logql

0 赞

所属分类： 大数据
本文标签： Linux
版权声明： 原创文章如转载，请注明本文链接: https://www.seaxiang.com/blog/6ZRzIj

热门推荐

1、直接访问google.com
2、 - 优质文章
3、 gate.io
4、 harmony 鸿蒙hdc使用指导
5、 harmony 鸿蒙ArkUI组件（ArkTS）开发常见问题
6、 harmony 鸿蒙初识ArkTS语言
7、 openharmony
8、 flink kafka connector scan.startup.mode 的几个选项
9、 golang

Loading...