/lager_graylog

Lager is a standard logging tool for Erlang, this project crates lager formatter to output messages in gelf format and lager backend to send messages via UDP.

Primary LanguageErlangApache License 2.0Apache-2.0

lager_graylog

Build Status

This application provides lager backends for sending log messages to Graylog over UDP or TCP, and the formatter module which spits out logs in GELF format.

TCP backend

When you need a reliable log delivery, you can use the backend which connects to Graylog using TCP. This backend will also try to reconnect to Graylog indefinitely (with backoff) in case of connection failure.

To use it, just declare it in your lager config:

[{lager, [{handlers, [{lager_graylog_tcp_backend, [{host, "graylog-hostname"},
                                                   {port, 12201}]

}]}]}].

This backend accepts configuration options as a list of tuples with atom keys. The following options are supported:

  • host (required) - host name or IP address (basically everything accepted by gen_tcp:connect/3) of the Graylog instance
  • port (required) - port where the Graylog instance accepts TCP connection
  • level (optional, default: info) - the log level (any log level supported by lager)
  • formatter (optional, default: lager_graylog_gelf_formatter) - the formatter used for formatting log messages before sending to Graylog
  • formatter_config - (optional, default: []) - passed as a second argument to formatter's format/2 function

UDP backend

If you care more about speed than reliability of delivery, you can use UDP-based backend.

To use it, just declare it in your lager config:

[{lager, [{handlers, [{lager_graylog_tcp_backend, [{host, "graylog-hostname"},
                                                   {port, 12201}]

}]}]}].

It accepts exactly the same set of options as TCP backend.

Chunking & compression

This backend currently doesn't support neither chunking nor compression. This means that too big log messages won't be probably received by Graylog due to packet fragmentation.

GELF formatter

The GELF formatter is implemented by the lager_graylog_gelf_formatter module. It formats log messages according to GELF version 1.1. The following fields are always included in the message:

  • "version" - always has value "1.1"
  • "host" - hostname retrieved using inet:gethostname/0 (might be overriden - see the override_host option in the configuration section below)
  • "short_message" - the log message
  • "level" - the log severity formatted as a number as in syslog

In addition, all metadata provided by lager in the log message will be included as additional fields (thus prefixed with _). Please note that this formatter can only format binaries, strings, atoms, integers, floats (always formatted with 6 decimal places), references, ports and pids.

Configuration

The formatter expects configuration as a list of tuples with atom keys. The following options are supported (all of them are optional):

  • metadata (default: all) - filters which metadata will be added to the message. You can provide all atom, which will instruct the formatter to include all metadata, or the list of keys (e.g. [line, file]) which must be included, or the {module, function} tuple. The function should take lager_msg:lager_msg() record as argument and return list of metadata tuples which will be included in the payload
  • include_timestamp (default: true) - instructs the formatter to include the "timestamp" field containing the timestamp in seconds with 6 decimal places. Note that Graylog will generate timestamp itself when this field is not present in the payload
  • override_host - if set, the "host" field in the GELF message will have the configured value

Example configuration:

[{metadata, all}, {include_default_ts, false}, {override_host, "my-chosen-hostname"}]

License

Copyright 2018 Erlang Solutions

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.