ื ืึธืืืึทืืืึทืก, ืขืก ืืื ืืืืืขืืืขื ืฆื ืืืึทืืืฉืึทื ืึท ืงืืืขืจื ืขืืขืก-ืืืืืจื ืคึผืจืืืขืงื ืึธื ืื ELK ืึธื ืืืืื, ืืืึธืก ืกืึทืืืขืก ืืึธืืก ืคืื ืืืืืข ืึทืคึผืืึทืงืืืฉืึทื ื ืืื ืกืืกืืขื ืงืึทืืคึผืึธืื ืึทื ืฅ ืคืื ืืขื ืงื ืืื. ืืื ืืื ืืืขืจ ืคืืจ, ืืืจ ื ืืฆื ืื EFK ืึธื ืืืืื ืืื Fluentd ืึทื ืฉืืึธื ืคืื Logstash.
Fluentd ืืื ืึท ืืึธืืขืจื, ืื ืืืืขืจืกืึทื ืงืืึธืฅ ืงืึทืืขืงืืขืจ ืืืึธืก ืืื ืืืื ืื ื ืืขืจ ืืื ืืขืจ ืคึผืึธืคึผืืืึทืจืืืขื ืืื ืืื ืืืื ืืขืฉืจืืื ืื ืงืืึธืื ื ืึทืืืืืข ืงืึทืืคึผืืืืื ื ืืืืงืืคึผืขืืืข, ืืืึธืก ืืื ืืืึธืก ืืืื ืึทื ืืืืืงืืื ื ืืืขืงืืึธืจ ืืื ืคืึธืืงืืกื ืืืืฃ ื ืืฆื ืืื ืงืึทื ืืืฉืึทื ืืงืฉืึทื ืืื Kubernetes.
ืืขืจ ืคืึทืงื ืคืื ื ืืฆื Fluentd ืึทื ืฉืืึธื ืคืื Logstash ืืื ื ืืฉื ืืืืฉื ืื ืึทืืืขืืืื ืข ืขืกืึทื ืก ืคืื ืื ืืืืืืืืืจื ืคึผืขืงื, ืึธืืขืจ, Fluentd ืืื ืงืขืจืึทืงืืขืจืืืื ืืืจื ืืืื ืืืืืขื ืข ืกืคึผืขืฆืืคืืฉ ื ืืึทื ืกืื ืจืืืึทืืืื ื ืคืื ืืืื ืืืขืจืกืึทืืืืึทืื.
ืคึฟืึทืจ ืืืึทืฉืคึผืื, ืืืขื ืืืจ ืกืืึทืจืืขื ื ืืฆื EFK ืืื ืึท ืคืึทืจื ืืืขื ืคึผืจืืืขืงื ืืื ืึท ืืืื ืื ืืขื ืกืืื ืคืื ืืึธืืื ื, ืืืจ ืืขื ืขื ืคืืืกื ืืื ืื ืคืึทืงื ืึทื ืืื ืงืืืึทื ืึท ืขืืืขืืข ืึทืจืืืงืืขื ืืขื ืขื ืืขืืืืื ืขืืืขืืข ืืึธื ืขืืืขืืข ืืึธื. ืืื ืืขื ืึทืจืืืงื ืืืจ ืืืขื ืืึธืื ืืืจ ืืืึธืก ืืขื ืืขืจืฉืืื ืื ื ืึทืงืขืจื ืืื ืืื ืฆื ืกืึธืืืืข ืื ืคึผืจืึธืืืขื.
ืื ืคึผืจืึธืืืขื ืคืื ืืึธืงืืืขื ื ืืืคึผืืืงืึทืืืึธื
ืืื ืืื ืืืขืจ ืคึผืจืึทืืืฉืขืงืก, Fluentd ืืื ืืืคึผืืืื ืืื ืึท DaemonSet (ืึธืืึทืืึทืืืง ืืึธื ืืฉื ืืื ืืืื ืืืึทืฉืคึผืื ืืืืฃ ืืขืืขืจ ื ืึธืืข ืคืื โโืื Kubernetes ืงื ืืื) ืืื ืืึธื ืืืึธืจ ืกืืืึธืื ืงืึทื ืืืื ืขืจ ืืึธืืก ืืื /var/log/containers. ื ืึธื ืืึทืืืื ื ืืื ืคึผืจืึทืกืขืกืื ื, ืื ืืึธืืก ืืื ืื ืคืึธืจืขื ืคืื JSON ืืึธืงืืืขื ืื ืืขื ืขื ืืขืฉืืงื ืฆื ElasticSearch, ืืืืคืฉืืืื ืืื ืงื ืืื ืึธืืขืจ ืกืืึทื ืืึทืืึธื ืข ืคืึธืจืขื, ืืืคึผืขื ืืื ื ืืืืฃ ืื ืืืึธื ืคืื ืื ืคึผืจืืืขืงื ืืื ืื ืืืืขืจืคืขื ืืฉื ืคึฟืึทืจ ืคืึธืจืฉืืขืืื ื ืืื ืฉืืื ืืึธืืขืจืึทื ืฅ. ืงืืืึทื ืึท ืืื ืืขื ืืฆื ืืื ืื ืืจืึทืคืืงืึทื ืฆืืืื ื.
ืืืขื ื ืืฆื Fluentd ืืื ืึท ืจืขืืืืืึทื ืืึทืคืขืจืื ื ืคึผืืืืื, ืืืจ ืืขืคึผืืึธื ืืขืจื ืึท ืกืืืืึทืฆืืข ืืื ืขืืืขืืข ืืึธืงืืืขื ืื ืืื ElasticSearch ืืึธืื ืคึผืื ืงื ืืขืจ ืืขืืืืงืขืจ ืืื ืืึทืื ืืื ืืืคืขืจื ืืืืื ืืื ืื ืืืขื ืืืคืืขืจ. ืืืจ ืงืขื ืขื ืืึทืฉืืขืืืงื ืึทื ืืึธืก ืืื ืึท ืึธื ืืึธื ืืืขืจืืึทืืขืจืื ื ื ืืฆื ืื Nginx ืงืืึธืฅ ืืื ืึท ืืืึทืฉืคึผืื. ืืื ืื ืงืืึธืฅ ืืขืงืข, ืืขื ืึธื ืืึธื ืืืืืกืฅ ืืื ืึท ืืืื ืงืึธืคึผืืข:
127.0.0.1 192.168.0.1 - [28/Feb/2013:12:00:00 +0900] "GET / HTTP/1.1" 200 777 "-" "Opera/12.0" -ืึธืืขืจ, ืขืก ืืขื ืขื ืขืืืขืืข ืืึธืงืืืขื ืื ืืื ElasticSearch ืืืึธืก ืึทื ืืืึทืืื ืืขื ืึธื ืืึธื:
{
"_index": "test-custom-prod-example-2020.01.02",
"_type": "_doc",
"_id": "HgGl_nIBR8C-2_33RlQV",
"_version": 1,
"_score": 0,
"_source": {
"service": "test-custom-prod-example",
"container_name": "nginx",
"namespace": "test-prod",
"@timestamp": "2020-01-14T05:29:47.599052886 00:00",
"log": "127.0.0.1 192.168.0.1 - [28/Feb/2013:12:00:00 0900] "GET / HTTP/1.1" 200 777 "-" "Opera/12.0" -",
"tag": "custom-log"
}
}
{
"_index": "test-custom-prod-example-2020.01.02",
"_type": "_doc",
"_id": "IgGm_nIBR8C-2_33e2ST",
"_version": 1,
"_score": 0,
"_source": {
"service": "test-custom-prod-example",
"container_name": "nginx",
"namespace": "test-prod",
"@timestamp": "2020-01-14T05:29:47.599052886 00:00",
"log": "127.0.0.1 192.168.0.1 - [28/Feb/2013:12:00:00 0900] "GET / HTTP/1.1" 200 777 "-" "Opera/12.0" -",
"tag": "custom-log"
}
}ืืขืจืฆื, ืขืก ืงืขื ืขื ืืืื ืืขืจ ืืื ืฆืืืื ืจืขืคึผืึทืืืฉืึทื ื.
ืืฉืขืช ืคืืงืกืืจ ืืขื ืคึผืจืึธืืืขื ืืื ืื Fluentd ืืึธืืก, ืืืจ ืงืขื ืขื ืืขื ืึท ืืจืืืก ื ืืืขืจ ืคืื ืืืึธืจื ืื ืื ืืื ืื ืคืืืืขื ืืข ืืื ืืึทืื:
2020-01-16 01:46:46 +0000 [warn]: [test-prod] failed to flush the buffer. retry_time=4 next_retry_seconds=2020-01-16 01:46:53 +0000 chunk="59c37fc3fb320608692c352802b973ce" error_class=Fluent::Plugin::ElasticsearchOutput::RecoverableRequestFailure error="could not push logs to Elasticsearch cluster ({:host=>"elasticsearch", :port=>9200, :scheme=>"http", :user=>"elastic", :password=>"obfuscated"}): read timeout reached"ืื ืืืึธืจื ืื ืื ืคืึทืื ืืืขื ElasticSearch ืงืขื ื ืืฉื ืฆืืจืืงืงืืืขื ืึท ืขื ืืคืขืจ ืฆื ืึท ืืงืฉื ืืื ืืขืจ ืฆืืื ืกืคึผืขืกืืคืืขื ืืืจื ืื request_timeout ืคึผืึทืจืึทืืขืืขืจ, ืืืึธืก ืืื ืืืึธืก ืื ืคืึธืจืืืขืจืืื ืืึทืคืขืจ ืคืจืึทืืืขื ื ืงืขื ืขื ื ืื ืืืื ืงืืืจื. ื ืึธื ืืขื, Fluentd ืคืจืืืื ืฆื ืฉืืงื ืื ืืึทืคืขืจ ืคืจืึทืืืขื ื ืฆื ElasticSearch ืืืืืขืจ ืืื ื ืึธื ืึท ืึทืจืืืืจืึทืจืืฉ ื ืืืขืจ ืคืื ืคืจืืืื, ืื ืึธืคึผืขืจืึทืฆืืข ืงืึทืืคึผืืืฅ ืืฆืืื:
2020-01-16 01:47:05 +0000 [warn]: [test-prod] retry succeeded. chunk_id="59c37fc3fb320608692c352802b973ce"
2020-01-16 01:47:05 +0000 [warn]: [test-prod] retry succeeded. chunk_id="59c37fad241ab300518b936e27200747"
2020-01-16 01:47:05 +0000 [warn]: [test-dev] retry succeeded. chunk_id="59c37fc11f7ab707ca5de72a88321cc2"
2020-01-16 01:47:05 +0000 [warn]: [test-dev] retry succeeded. chunk_id="59c37fb5adb70c06e649d8c108318c9b"
2020-01-16 01:47:15 +0000 [warn]: [kube-system] retry succeeded. chunk_id="59c37f63a9046e6dff7e9987729be66f"ืึธืืขืจ, ElasticSearch ืืืืื ืืื ืืขืืขืจ ืคืื ืื ืืจืึทื ืกืคืขืจื ืืึทืคืขืจ ืคืจืึทืืืึทื ืฅ ืืื ืืื ืฆืืง ืืื ืึทืกืืื ื ืืื ืืื ืฆืืง _id ืคืขืื ืืืึทืืืขืก ืืขืฉืึทืก ืื ืืขืงืกืื ื. ืืึธืก ืืื ืืื ืงืึธืคึผืืขืก ืคืื ืึทืจืืืงืืขื ืืขืจืฉืืึทื ืขื.
ืืื ืงืืืึทื ืึท ืขืก ืงืืงื ืืื ืืึธืก:
ืื ืืืืืื ื
ืขืก ืืขื ืขื ืขืืืขืืข ืึธืคึผืฆืืขืก ืฆื ืกืึธืืืืข ืืขื ืคึผืจืึธืืืขื. ืืืื ืขืจ ืคืื ืืื ืืื ืื ืืขืงืึทื ืืืึทื ืืขืืืื ืืื ืื ืืืึทื-ืคึผืืืืื-elasticsearch ืคึผืืืืื ืคึฟืึทืจ ืืืฉืขื ืขืจืืืืื ื ืึท ืืื ืฆืืง ืืึทืฉ ืคึฟืึทืจ ืืขืืขืจ ืืึธืงืืืขื ื. ืืืื ืืืจ ื ืืฆื ืืขื ืืขืงืึทื ืืืึทื, ElasticSearch ืืืขื ืืขืจืงืขื ืขื ืจืขืคึผืึทืืืฉืึทื ื ืืื ืื ืคืึธืจืืืขืจืืื ื ืืื ืข ืืื ืคืึทืจืืืึทืื ืืืคึผืืืงืึทื ืืึธืงืืืขื ืื. ืืืขืจ ืืืจ ืืืื ื ืขืืขื ืืื ืืฉืืื ืึทื ืืขื ืืืคึฟื ืคืื ืกืึทืืืืื ื ืื ืคึผืจืึธืืืขื ืืื ืกืืจืึทืืึทืืื ื ืืื ืื ืืืกืคืึธืจืฉืื ื ืืื ืืื ื ืืฉื ืขืืืืื ืืจื ืืขื ืืขืืช ืืื ืึท ืคืขืื ืคืื ืืืืืึทืื, ืึทืืื ืืืจ ืคืืจืืืื ืืืึทื ื ืืฆื.
ืืืจ ื ืืฆื ืึท ืืึทืคืขืจืื ื ืคึผืืืืื ืืืืฃ ืื Fluentd ืจืขืืืืืึทื ืฆื ืคืึทืจืืืึทืื ืงืืึธืฅ ืึธื ืืืขืจ ืืื ืคืึทื ืคืื ืงืืจืฅ-ืืขืจืืื ื ืขืฅ ืคึผืจืึธืืืขืืก ืึธืืขืจ ืืขืืืืงืกื ืืึธืืื ื ืื ืืขื ืกืืื. ืืืื ืคึฟืึทืจ ืขืืืขืืข ืกืืื ElasticSearch ืืื ื ืื ืืืืืืช ืฆื ืืืืงืขืฃ ืฉืจืืึทืื ืึท ืืึธืงืืืขื ื ืฆื ืื ืืื ืืขืงืก, ืืขืจ ืืึธืงืืืขื ื ืืื ืงืื ืืื ืกืืึธืจื ืืืืฃ ืืืกืง. ืืขืจืืืขืจ, ืืื ืืื ืืืขืจ ืคืึทื, ืืื ืกืืจ ืฆื ืขืืืืื ืืจื ืื ืืงืืจ ืคืื ืื ืคึผืจืึธืืืขื ืืืึธืก ืคืืจื ืฆื ืื ืืขืืช ืืืกืงืจืืืื ืืืืื, ืขืก ืืื ื ืืืืืง ืฆื ืฉืืขืื ืื ืจืืืืืง ืืืึทืืืขืก ืคึฟืึทืจ ืื ืืึทืคืขืจืื ื ืคึผืึทืจืึทืืขืืขืจืก, ืืื ืืืึธืก ืื Fluentd ืจืขืืืืืึทื ืืึทืคืขืจ ืืืขื ืืืื ืืขื ืื ืืจืืืก ืืื ืืื ืืขืจ ืืขืืืืงืขืจ ืฆืืึทื ืคืืจื ืฆื ืืืื ืงืืืจื ืืื ืื ืึทืืึทืืื ืฆืืึทื.
ืขืก ืืื ืืืื ืฆื ืืืืขืจืงื ืึทื ืื ืืืึทืืืขืก ืคืื ืื ืคึผืึทืจืึทืืขืืขืจืก ืืืกืงืึทืกื ืืื ืื ืืขื ืขื ืืืื ืืื ืืขืืขืจ ืกืคึผืขืฆืืคืืฉ ืคืึทื ืคืื ื ืืฆื ืืึทืคืขืจืื ื ืืื ืจืขืืืืืึทื ืคึผืืืืื ืก, ืืืืึทื ืืื ืึธืคืขื ืืขื ืืืืฃ ืคืืืข ืกืืืืช: ืื ืื ืืขื ืกืืื ืคืื ืฉืจืืืื ืึทืจืืืงืืขื ืฆื ืื ืงืืึธืฅ ืืืจื ืกืขืจืืืืกืขืก, ืืืกืง ืกืืกืืขื ืคืึธืจืฉืืขืืื ื, ื ืขืฅ ืงืึทื ืึทื ืืึทืกืข ืืื ืืืึทื ืืึทื ืืืืืื. ืืขืจืืืขืจ, ืึผืื ืฆื ืืึทืงืืืขื ืืึทืคืขืจ ืกืขืืืื ืืก ืืืึธืก ืืขื ืขื ืคึผืึทืกืืง ืคึฟืึทืจ ืืขืืขืจ ืืืื ืคืึทื, ืึธืืขืจ ื ืืฉื ืืืขืจืืง, ืืืกืืืืื ืืึทื ื ืึธื ืคึฟืจืขืื ืืืืื ืืื, ืืืจ ืงืขื ืขื ื ืืฆื ืื ืืืืึทืืื ื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืึธืก Fluentd ืฉืจืืืื ืฆื ืืืื ืงืืึธืฅ ืืขืฉืึทืก ืึธืคึผืขืจืึทืฆืืข ืืื ืืขืคืืขืจืขื ืืขืฉืืืื ื ืืึทืงืืืขื ืื ืจืืืืืง ืืืึทืืืขืก.
ืืื ืืขืจ ืฆืืื ืืืขื ืื ืคึผืจืึธืืืขื ืืื ืจืขืงืึธืจืืขื, ืื ืงืึทื ืคืืืืขืจืืืฉืึทื ืืขืงืืงื ืืื ืืึธืก:
<buffer>
@type file
path /var/log/fluentd-buffers/kubernetes.test.buffer
flush_mode interval
retry_type exponential_backoff
flush_thread_count 2
flush_interval 5s
retry_forever
retry_max_interval 30
chunk_limit_size 8M
queue_limit_length 8
overflow_action block
</buffer>ืืืขื ืกืึทืืืืื ื ืื ืคึผืจืึธืืืขื, ืื ืืืึทืืืขืก ืคืื ืื ืคืืืืขื ืืข ืคึผืึทืจืึทืืขืืขืจืก ืืขื ืขื ืืึทื ืืืึทืื ืืืืกืืขืงืืืื:
chunk_limit_size - ืื ืืจืืืก ืคืื ืื ืืฉืึทื ืืงืก ืืื ืืืึธืก ืึทืจืืืงืืขื ืืื ืื ืืึทืคืขืจ ืืขื ืขื ืฆืขืืืืื.
- flush_interval - ืฆืืื ืืขืืึทืืขื ื ืึธื ืืืึธืก ืื ืืึทืคืขืจ ืืื ืงืืืจื.
- queue_limit_length - ืื ืืึทืงืกืืืื ื ืืืขืจ ืคืื ืืฉืึทื ืืงืก ืืื ืืขืจ ืจืื.
- request_timeout ืืื ืื ืฆืืื ืคึฟืึทืจ ืืืึธืก ืื ืงืฉืจ ืฆืืืืฉื Fluentd ืืื ElasticSearch ืืื ืืขืืจืื ืืขื.
ืื ืืึทื ืฅ ืืึทืคืขืจ ืืจืืืก ืงืขื ืขื ืืืื ืงืึทืืงืืึทืืืืืื ืืืจื ืืึทืืืึทืคึผืืืืื ื ืื ืคึผืึทืจืึทืืขืืขืจืก queue_limit_length ืืื chunk_limit_size, ืืืึธืก ืงืขื ืขื ืืืื ืื ืืขืจืคึผืจืึทืืึทื ืืื "ืื ืืึทืงืกืืืื ื ืืืขืจ ืคืื ืืฉืึทื ืืงืก ืืื ืืขืจ ืจืื, ืืขืืขืจ ืคืื ืืืึธืก ืืื ืึท ืืขืืขืื ืืจืืืก." ืืืื ืื ืืึทืคืขืจ ืืจืืืก ืืื ื ืื ืืขื ืืืืง, ืื ืคืืืืขื ืืข ืืืืจืขื ืื ื ืืืขื ืืขืจืฉืืึทื ืขื ืืื ืื ืืึธืืก:
2020-01-21 10:22:57 +0000 [warn]: [test-prod] failed to write data into buffer by buffer overflow action=:blockืขืก ืืืื ืึทื ืืขืจ ืืึทืคืขืจ ืืื ื ืืฉื ืืึธืื ืฆืืื ืฆื ืืืื ืงืืืจื ืืื ืื ืึทืืึทืืื ืฆืืื ืืื ืื ืืึทืื ืืืึธืก ืึทืจืืึทื ืื ืคืื ืืึทืคืขืจ ืืขื ืขื ืืคืืขืฉืืขืื, ืืืึธืก ืืืขื ืคืืจื ืฆื ืื ืึธื ืืืขืจ ืคืื ืืืื ืคืื ืื ืืึธืืก.
ืืืจ ืงืขื ืขื ืคืึทืจืืจืขืกืขืจื ืื ืืึทืคืขืจ ืืื ืฆืืืื ืืืขืื: ืืืจื ืื ืงืจืืกืื ื ืึธืืขืจ ืื ืืจืืืก ืคืื ืืขืืขืจ ืฉืืืง ืืื ืืขืจ ืจืื, ืึธืืขืจ ืื ื ืืืขืจ ืคืื ืืฉืึทื ืืงืก ืืืึธืก ืงืขื ืขื ืืืื ืืื ืืขืจ ืจืื.
ืืืื ืืืจ ืฉืืขืื ืื ืืฉืึทื ืง ืืจืืืก chunk_limit_size ืฆื ืืขืจ ืืื 32 ืืขืืืืืื, ElasticSeacrh ืืืขื ื ืืฉื ืึธื ื ืขืืขื ืขืก, ืืืืึทื ืื ืื ืงืึทืืื ื ืคึผืึทืงืึทื ืืืขื ืืืื ืฆื ืืจืืืก. ืืขืจืืืขืจ, ืืืื ืืืจ ืืึทืจืคึฟื ืฆื ืคืึทืจืืจืขืกืขืจื ืื ืืึทืคืขืจ ืืืืึทืืขืจ, ืขืก ืืื ืืขืกืขืจ ืฆื ืคืึทืจืืจืขืกืขืจื ืื ืืึทืงืกืืืื ืจืื ืืขื ื queue_limit_length.
ืืืขื ืืขืจ ืืึทืคืขืจ ืกืืึทืคึผืก ืึธืืืืขืจืคืืึธืืื ื ืืื ืืืืื ืื ืืืืืึทืื ื ืื ืืขื ืืืืง ืึธื ืืึธื ืืืืืื, ืืืจ ืงืขื ืขื ืึธื ืืืืื ืื ืงืจืืกืื ื ืื request_timeout ืคึผืึทืจืึทืืขืืขืจ. ืึธืืขืจ, ืืืื ืืืจ ืฉืืขืื ืื ืืืขืจื ืฆื ืืขืจ ืืื 20 ืกืขืงืื ืืขืก, ืื ืคืืืืขื ืืข ืืืึธืจื ืื ืื ืืืขื ืึธื ืืืืื ืฆื ืืขืจืฉืืึทื ืขื ืืื ืื ืคืืืขื ืื ืืึธืืก:
2020-01-21 09:55:33 +0000 [warn]: [test-dev] buffer flush took longer time than slow_flush_log_threshold: elapsed_time=20.85753920301795 slow_flush_log_threshold=20.0 plugin_id="postgresql-dev" ืืขืจ ืึธื ืืึธื ืืื ื ืืฉื ืืืืจืงื ืื ืึธืคึผืขืจืึทืฆืืข ืคืื โโโโืื ืกืืกืืขื ืืื ืงืืื ืืืขื ืืื ืืืื ืึทื ืื ืืึทืคืขืจ ืคืืึทืฉ ืฆืืื ืืขื ืืืขื ืืขืจ ืืื ืืึทืฉืืืื ืืืจื ืื slow_flush_log_threshold ืคึผืึทืจืึทืืขืืขืจ. ืืึธืก ืืื ืืืืึทืืื ื ืืื ืคึฟืึธืจืืึทืฆืืข ืืื ืืืจ ื ืืฆื ืขืก ืืืขื ืืฉืืืื ื ืื ืืืขืจื ืคืื ืื request_timeout ืคึผืึทืจืึทืืขืืขืจ.
ืืขืจ ืืขื ืขืจืึทืืืืขื ืกืขืืขืงืฆืืข ืึทืืืขืจืืืึทื ืืื ืืื ืืืื:
- ืฉืืขืื request_timeout ืฆื ืึท ืืืขืจื ืืขืจืึทื ืืื ืฆื ืืืื ืืจืขืกืขืจ ืืื ื ืืืืืง (ืืื ืืขืจืืขืจ ืกืขืงืื ืืขืก). ืืขืฉืึทืก ืกืขืืึทืคึผ, ืื ืืืืคึผื ืงืจืืืขืจืืึธื ืคึฟืึทืจ ืื ืจืืืืืง ืืึทืฉืืขืืืงื ืคืื ืืขื ืคึผืึทืจืึทืืขืืขืจ ืืื ืื ืืืกืึทืคึผืืจืึทื ืก ืคืื ืืืึธืจื ืื ืื ืคึฟืึทืจ ืึท ืคืขืื ืคืื ืืืืืึทืื.
- ืืืึทืจืื ืคึฟืึทืจ ืึทืจืืืงืืขื ืืืขืื ืืงืกืื ืื slow_flush_log_threshold ืฉืืืขื. ืื ืืืืจืขื ืื ื ืืขืงืกื ืืื ืื elapsed_time ืคืขืื ืืืขื ืืืืึทืื ืื ืคืึทืงืืืฉ ืฆืืื ืืืขื ืื ืืึทืคืขืจ ืืื ืงืืืจื.
- ืฉืืขืื request_timeout ืฆื ืึท ืืืขืจื ืืจืขืกืขืจ ืืื ืื ืืึทืงืกืืืื elapsed_time ืืืขืจื ืืืงืืืขื ืืขืฉืึทืก ืื ืึธืืกืขืจืืืึทืฆืืข ืฆืืึทื. ืืืจ ืจืขืืขื ืขื ืื request_timeout ืืืขืจื ืืื elapsed_time + 50%.
- ืฆื ืืึทืืืึทืืืงื ืืืึธืจื ืื ืื ืืืขืื ืืึทื ื ืืึทืคืขืจ ืคืืืฉืขืก ืคืื ืื ืงืืึธืฅ, ืืืจ ืงืขื ืขื ืืึทืคึผื ืื ืืืขืจื ืคืื slow_flush_log_threshold. ืืืจ ืจืขืืขื ืขื ืืขื ืืืขืจื ืืื elapsed_time + 25%.
ืื ืืขืฆื ืืืึทืืืขืก ืคืื ืื ืคึผืึทืจืึทืืขืืขืจืก, ืืื ืืขืจืืื ื ืคืจืืขืจ, ืืขื ืขื ืืืงืืืขื ืื ืืืืืืืืฉืืึทืื ืคึฟืึทืจ ืืขืืขืจ ืคืึทื. ืืืจื ื ืึธืืคืึธืืื ืื ืึทืืืขืจืืืึทื ืืืืื, ืืืจ ืืขื ืขื ืืขืจืึทื ืืื ืฆื ืขืืืืื ืืจื ืื ืืขืืช ืืืึธืก ืคืืจื ืฆื ืจืืคึผืืืื ืึทืจืืืงืืขื.
ืื ืืืฉ ืืื ืื ืืืืืื ืืื ืื ื ืืืขืจ ืคืื ืขืจืจืึธืจืก ืคึผืขืจ ืืึธื, ืืืึธืก ืคืืจื ืฆื ืืืคึผืืืงืืืฉืึทื ืคืื ืึทืจืืืงืืขื, ืขื ืืขืจืื ืืขื ืืื ืืขื ืคึผืจืึธืฆืขืก ืคืื ืกืขืืขืงืืื ื ืื ืืืึทืืืขืก ืคืื ืื ืืืืื ืืืกืงืจืืืื ืคึผืึทืจืึทืืขืืขืจืก:
ื ืึธืืข-1
ื ืึธืืข-2
ื ืึธืืข-3
ื ืึธืืข-4
ืืืืืขืจ ื ืึธื
ืืืืืขืจ ื ืึธื
ืืืืืขืจ ื ืึธื
ืืืืืขืจ ื ืึธื
ื ืื ืึทื ืืขืจืฉ ืฆื ืืืกืฉืขืคึผื ืื ืืึทืคืขืจ
1749/2
694/2
47/0
1121/2
ืืืืืขืจ ืืขืจืึธืื
410/2
205/1
24/0
241/2
ืขืก ืืื ืืืื ืืืื ืฆื ืืืืขืจืงื ืึทื ืื ืจืืืึทืืืื ื ืกืขืืืื ืืก ืงืขื ืคืึทืจืืืจื ืืืืขืจ ืฉืืืืืช ืืืขื ืื ืคึผืจืืืขืงื ืืืืงืกื ืืื, ืึทืงืึธืจืืื ืืื, ืื ื ืืืขืจ ืคืื ืืึธืืก ืื ืงืจืืกืื. ืืขืจ ืขืจืฉืืืง ืฆืืืื ืคืื ื ืื ืืขื ืืืืง ืืืืืึทืื ืืื ืื ืฆืืจืืงืงืขืจ ืคืื ืึทืจืืืงืืขื ืืืขืื ืึท ืืึทื ื ืืึทืคืขืจ ืืืืึทื ืฆื ืื Fluentd ืงืืึธืฅ, ืืึธืก ืืื ืืงืกืื ืื ืกืืึธื_ืคืืืฉ_ืืึธื_ืืืจืขืฉืึธืื ืฉืืืขื. ืคึฟืื ืืขื ืคืื ื ืืืืฃ, ืขืก ืืื ื ืึธื ืึท ืงืืืื ืืจืขื ืขืฅ ืืืืืขืจ ืื ืจืขืงืืืืจืข_ืืืืขืึธืื ืคึผืึทืจืึทืืขืืขืจ ืืื ืืงืกืืืื, ืึทืืื ืขืก ืืื ื ืืืืืง ืฆื ืจืืกืคึผืึทื ื ืฆื ืื ืึทืจืืืงืืขื ืืื ืึท ืืืึทืฆืืึทืืืง ืฉืืืืืขืจ ืืื ืืืืขืจืืืจื ืืขื ืคึผืจืึธืฆืขืก ืคืื ืกืึทืืขืงืืื ื ืื ืึธืคึผืืืืึทื ืกืขืืืื ืืก ืืืกืงืจืืืื ืืืืื.
ืกืึธืฃ
ืคืืื-ืืื ืื ื ืื Fluentd ืจืขืืืืืึทื ืืึทืคืขืจ ืืื ืืืื ืขืจ ืคืื ืื ืืืืคึผื ืกืืึทืืขืก ืคืื ืงืึทื ืคืืืืขืจืื ื ืื EFK ืึธื ืืืืื, ืืืืขืจืืึทื ืื ื ืื ืคืขืกืืงืืึทื ืคืื ืืืึทื ืึธืคึผืขืจืึทืฆืืข ืืื ืื ืจืืืืืง ืคึผืืืืกืืึทื ื ืคืื ืืึธืงืืืขื ืื ืืื ืื ืืขืงืกืื. ืืึทืืืจื ืืืืฃ ืื ืืืกืงืจืืืื ืงืึทื ืคืืืืขืจืืืฉืึทื ืึทืืืขืจืืืึทื, ืืืจ ืงืขื ืขื ืืืื ืืืืขืจ ืึทื ืึทืืข ืืึธืืก ืืืขื ืืืื ืืขืฉืจืืื ืฆื ืื ElasticSearch ืืื ืืขืงืก ืืื ืื ืจืืืืืง ืกืืจ, ืึธื ืจืขืคึผืึทืืืฉืึทื ื ืึธืืขืจ ืืึธืกืกืขืก.
ืืืืขื ืขื ืืืื ืื ืืขืจืข ืึทืจืืืงืืขื ืืืืฃ ืืื ืืืขืจ ืืืึธื:
ืืงืืจ: www.habr.com