使用Serilog登录到ElasticSearch

Question

有没有一个有帮助的灵魂，谁能帮我让Serilog和它的ElasticSearch模块在PowerShell中工作？

我找到了一个让滚动文件日志工作的人，但是我一直找不到ElasticSearch的例子。

Add-Type -Path "Serilog.dll"
#Add-Type -Path "Serilog.Sinks.Seq.dll"
#Add-Type -Path "Serilog.Sinks.EventLog.dll"
Add-Type -Path "serilog.sinks.elasticsearch.dll"
Add-Type -Path "Serilog.FullNetFx.dll"
Add-Type -Path "Elasticsearch.Net.dll"
#Add-Type -Path "Serilog.Extras.AppSettings.dll"
#Add-Type -Path "Serilog.Extras.Timing.dll"

$config = New-Object -TypeName "Serilog.LoggerConfiguration"
[Serilog.Configuration.LoggerSinkConfiguration]$ConfigSink = $config.WriteTo

<#
[Serilog.Log]::Logger = [Serilog.LoggerConfigurationFullNetFxExtensions]::RollingFile
                                ($ConfigSink,
                                "C:\Logs\Log-{Date}.txt",
                        ([Serilog.Events.LogEventLevel]::Verbose), "{Timestamp:yyyy-MM-dd HH:mm:ss.fff zzz} [{Level}] {Message}{NewLine}{Exception}", $null, 10000000, 15).CreateLogger()
#>

$config.CreateLogger()

[Serilog.Log]::Logger = [Serilog.LoggerConfigurationElasticsearchExtensions]::Elasticsearch($ConfigSink, "http://192.168.1.125:9200", "custom-index-{0:yyyy.MM}", "asdd"),
                        ([Serilog.Events.LogEventLevel]::Verbose), "{Timestamp:yyyy-MM-dd HH:mm:ss.fff zzz} [{Level}] {Message}{NewLine}{Exception}", $null, 10000000, 15).CreateLogger()

[Serilog.Log]::Information("Logging starte");

Answer 1

对于仍然对使用ElasticSearch登录PowerShell感兴趣的人来说--您可以使用基于Serilog的PoShLog.Sinks.Elasticsearch模块，它是ElasticSearch接收器扩展。别忘了安装主PoShLog模块。

使用这些模块的示例：

Import-Module PoShLog
Import-Module PoShLog.Sinks.Elasticsearch

New-Logger |
    Add-SinkElasticsearch `
        -Uri 'http://elasticsearch:9200' `
        -AutoRegisterTemplate `
        -AutoRegisterTemplateVersion ESv7 `
        -IndexFormat 'logstash' |
    Add-SinkConsole |
    Start-Logger

Write-InformationLog "Hello {entity}!" -PropertyValues "World"

Close-Logger