Nginx 日志格式配置介绍

Nginx日志格式配置介绍

 

by:授客  QQ：1033553122

 

测试环境

CentOS 6.5-x86_64

nginx-1.10.0

配置例子

log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '

'$status $request_time $upstream_response_time $request_length $bytes_sent $body_bytes_sent $gzip_ratio $connection_requests "$http_referer" '

'"$http_user_agent" "$http_x_forwarded_for"';

access_log logs/nginx-access.log main;

说明：如下，有时候我们可以把日志配置json串格式，方便其它程序使用

log_format  main  '{

"remote_addr":"$remote_addr",

"remote_user":"$remote_user",

"time_local":"$time_local",

"request":"$request",

"status":"$status",

"request_time":"$request_time",

"upstream_response_time":"$upstream_response_time",

"request_length":"$request_length",

"bytes_sent":"$bytes_sent",

"body_bytes_sent":"$body_bytes_sent",

"gzip_ratio":"$gzip_ratio",

"connection_requests":"$connection_requests",

"http_referer":"$http_referer",

"http_user_agent":"$http_user_agent",

"http_x_forwarded_for":"$http_x_forwarded_for"

}';

配置说明

可在相同层级(个人理解：这里的层级为下文的Context范围)指定多个日志

语法说明:

access_log path [format [buffer=size] [gzip[=level]] [flush=time] [if=condition]];

access_log off;  # 关闭当前层级上的指定日志，即不记录日志

Default：access_log logs/access.log combined;

Context: http, server, location, if in location, limit_except

注意：路径path必须存在，如果开启了gzip日志压缩，则不能通过控制台实时查看日志了。

Syntax: log_format name [escape=default|json] string ...;

Default: log_format combined "...";

Context: http

 

format变量说明

$remote_addr

发起请求的客户端所在ip地址

$remote_user

发起请求的客户端用户名称，获取不到则显示为 -

$time_local

用来记录访问时间与时区(依赖nginx服务器本地时间)，形如 20/Aug/2017:21:15:19 +0800，获取不到则显示为 -

$time_iso8601

类似$time_local，不同的是这里采用ISO 8601标准格式

$request

记录发起的请求，形如

POST /zentaopms/www/index.php?m=user&f=login&referer=L3plbnRhb3Btcy93d3cvaW5kZXgucGhw HTTP/1.1

$status

记录响应状态，比如 200

$request_time

记录请求处理时间（以秒为单位，携带毫秒的解决方案），从读取客户端第一个字节开始算起，到发送最后一个字节给客户端的时间间隔（原文：request processing time in seconds with a milliseconds resolution; time elapsed between the first bytes were read from the client and the log write after the last bytes were sent to the client）

$upstream_response_time

记录nginx从后端服务器(upstream server)获取响应的时间（以秒为单位，携带毫秒的解决方案），多个请求的时间以逗号分隔

参考链接：

http://nginx.org/en/docs/http/ngx_http_upstream_module.html#var_upstream_response_time

$request_length

记录请求长度(包括请求行，请求头，请求体)

$gzip_ratio

记录nginx gzip压缩比例，获取不到则显示为 -

$bytes_sent

发送给客户端的字节数

$body_bytes_sent

发送给客户端的响应体字节数

$connection_requests

单个连接的并发请求数（the current number of requests made through a connection (1.1.18)

$http_referer

记录请求引用页面地址

$http_user_agent

记录用户代理信息（通常是浏览器信息

$http_x_forwarded_for

当为了承受更大的负载使用反向代理时，web服务器不能获取真实的客户端IP，$remote_addr获取到的是反向代理服务器的ip，这种情况下，代理服务器通常会增加一个叫做x_forwarded_for的信息头，把连接它的真实客户端IP加到这个信息头里，这样就能保证网站的web服务器能获取到真实IP，获取不到则显示为 -

$connection

连接序列号

$msec

写入日志的时间（以秒为单位，携带毫秒的解决方案）(原文：time in seconds with a milliseconds resolution at the time of the log write)

$pipe

如果为管道请求则显示为p，否则显示为 .

日志输出样例

# tail -f /usr/local/ngnix/logs/access.log

192.168.1.101 - - [20/Aug/2017:22:28:44 +0800] "POST /zentaopms/www/index.php?m=user&f=login&referer=L3plbnRhb3Btcy93d3cvaW5kZXgucGhw HTTP/1.1" 200 0.365 0.365 764 794 302 - 1 "http://192.168.1.102/zentaopms/www/index.php?m=user&f=login&referer=L3plbnRhb3Btcy93d3cvaW5kZXgucGhw" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:54.0) Gecko/20100101 Firefox/54.0" "-"

# tail -f /usr/local/ngnix/logs/access.log

{

"remote_addr":"192.168.1.101",

"remote_user":"-",

"time_local":"31/Aug/2017:10:37:01 +0800",

"request":"GET /zentaopms/www/index.php?m=user&f=login&referer=L3plbnRhb3Btcy93d3cvaW5kZXgucGhw HTTP/1.1",

"status":"200",

"request_time":"0.562",

"upstream_response_time":"0.562",

"request_length":"546",

"bytes_sent":"8013",

"body_bytes_sent":"7520",

"gzip_ratio":"-",

"connection_requests":"1",

"http_referer":"-",

"http_user_agent":"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0",

"http_x_forwarded_for":"-"

}

参考链接：

http://nginx.org/en/docs/http/ngx_http_log_module.html#access_log