mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
48 lines
2.6 KiB
Properties
48 lines
2.6 KiB
Properties
status = error
|
|
#appender.console.type = Console
|
|
#appender.console.name = console
|
|
#appender.console.layout.type = PatternLayout
|
|
#appender.console.layout.pattern = [%d{ISO8601}][%-5p][%-25c{1.}] %marker%m%n
|
|
#rootLogger.level = info
|
|
#rootLogger.appenderRef.console.ref = console
|
|
# This is a test -- if this here, then the volume is mounted correctly.
|
|
appender.rolling.type = RollingFile
|
|
appender.rolling.name = rolling
|
|
appender.rolling.fileName = ${sys:es.logs.base_path}${sys:file.separator}${sys:es.logs.cluster_name}.log
|
|
appender.rolling.layout.type = PatternLayout
|
|
appender.rolling.layout.pattern = [%d{ISO8601}][%-5p][%-25c] %.10000m%n
|
|
appender.rolling.filePattern = ${sys:es.logs.base_path}${sys:file.separator}${sys:es.logs.cluster_name}-%d{yyyy-MM-dd}.log.gz
|
|
appender.rolling.policies.type = Policies
|
|
appender.rolling.policies.time.type = TimeBasedTriggeringPolicy
|
|
appender.rolling.policies.time.interval = 1
|
|
appender.rolling.policies.time.modulate = true
|
|
appender.rolling.strategy.type = DefaultRolloverStrategy
|
|
appender.rolling.strategy.action.type = Delete
|
|
appender.rolling.strategy.action.basepath = /var/log/elasticsearch
|
|
appender.rolling.strategy.action.condition.type = IfFileName
|
|
appender.rolling.strategy.action.condition.glob = *.log.gz
|
|
appender.rolling.strategy.action.condition.nested_condition.type = IfLastModified
|
|
appender.rolling.strategy.action.condition.nested_condition.age = 7D
|
|
|
|
appender.rolling_json.type = RollingFile
|
|
appender.rolling_json.name = rolling_json
|
|
appender.rolling_json.fileName = ${sys:es.logs.base_path}${sys:file.separator}${sys:es.logs.cluster_name}.json
|
|
appender.rolling_json.layout.type = ECSJsonLayout
|
|
appender.rolling_json.layout.dataset = elasticsearch.server
|
|
appender.rolling_json.filePattern = ${sys:es.logs.base_path}${sys:file.separator}${sys:es.logs.cluster_name}-%d{yyyy-MM-dd}.json.gz
|
|
appender.rolling_json.policies.type = Policies
|
|
appender.rolling_json.policies.time.type = TimeBasedTriggeringPolicy
|
|
appender.rolling_json.policies.time.interval = 1
|
|
appender.rolling_json.policies.time.modulate = true
|
|
appender.rolling_json.strategy.type = DefaultRolloverStrategy
|
|
appender.rolling_json.strategy.action.type = Delete
|
|
appender.rolling_json.strategy.action.basepath = /var/log/elasticsearch
|
|
appender.rolling_json.strategy.action.condition.type = IfFileName
|
|
appender.rolling_json.strategy.action.condition.glob = *.json.gz
|
|
appender.rolling_json.strategy.action.condition.nested_condition.type = IfLastModified
|
|
appender.rolling_json.strategy.action.condition.nested_condition.exceeds = 1D
|
|
|
|
rootLogger.level = info
|
|
rootLogger.appenderRef.rolling.ref = rolling
|
|
rootLogger.appenderRef.rolling_json.ref = rolling_json
|