<!--logStash-->
 <dependency>
 <groupId>net.logstash.logback</groupId>
 <artifactId>logstash-logback-encoder</artifactId>
 <version>5.3</version>
 </dependency>

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
 <include resource="org/springframework/boot/logging/logback/base.xml" />
 <appender name="LOGSTASH" class="net.logstash.logback.appender.LogstashTcpSocketAppender">
 <!--配置logStash 服務(wù)地址-->
 <destination>192.168.92.50:4560</destination>
 <!-- 日志輸出編碼 -->
 <encoder charset="UTF-8"
   class="net.logstash.logback.encoder.LoggingEventCompositeJsonEncoder">
  <providers>
  <timestamp>
   <timeZone>UTC</timeZone>
  </timestamp>
  <pattern>
   <pattern>
   {
   "logLevel": "%level",
   "serviceName": "${springAppName:-}",
   "pid": "${PID:-}",
   "thread": "%thread",
   "class": "%logger{40}",
   "rest": "%message"
   }
   </pattern>
  </pattern>
  </providers>
 </encoder>
 </appender>

 <root level="INFO">
 <appender-ref ref="LOGSTASH" />
 <appender-ref ref="CONSOLE" />
 </root>
</configuration>

# Sample Logstash configuration for creating a simple
# Beats -> Logstash -> Elasticsearch pipeline.

input {
 tcp {
 mode => "server"
 host => "192.168.92.50"
 port => 4560
 codec => json_lines
 }
}
output {
 elasticsearch {
 hosts => "192.168.92.50:9200"
 index => "springboot-logstash-%{+YYYY.MM.dd}"
 }
}