version: '3'
services:# MongoDB: https://hub.docker.com/_/mongo/mongo:image: mongo:3networks:- graylog# Elasticsearch: https://www.elastic.co/guide/en/elasticsearch/reference/6.x/docker.htmlelasticsearch:image: docker.elastic.co/elasticsearch/elasticsearch-oss:6.8.10environment:- http.host=0.0.0.0- transport.host=localhost- network.host=0.0.0.0- "ES_JAVA_OPTS=-Xms512m -Xmx512m"ulimits:memlock:soft: -1hard: -1deploy:resources:limits:memory: 1gnetworks:- graylog# Graylog: https://hub.docker.com/r/graylog/graylog/graylog:image: graylog/graylog:3.3environment:# CHANGE ME (must be at least 16 characters)!- GRAYLOG_PASSWORD_SECRET=somepasswordpepper# Password: admin- GRAYLOG_ROOT_PASSWORD_SHA2=8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918- GRAYLOG_HTTP_EXTERNAL_URI=http://127.0.0.1:9000/networks:- graylogdepends_on:- mongo- elasticsearchports:# Graylog web interface and REST API- 9000:9000# Syslog TCP- 1514:1514# Syslog UDP- 1514:1514/udp# GELF TCP- 12201:12201# GELF UDP- 12201:12201/udp
networks:graylog:driver: bridge

curl -XPOST http://192.168.179.191:12201/gelf -p0 -d '{"short_message":"Hello there", "host":"example.org", "facility":"test", "_foo":"bar"}'

<!--logback gelf日志收集-->
<dependency><groupId>biz.paluch.logging</groupId><artifactId>logstash-gelf</artifactId><version>1.11.1</version>
</dependency>

<springProperty scope="context" name="APP_NAME" source="spring.application.name"/>
<springProperty scope="context" name="GROYLOG_IP" source="groylog.ip"/>
<springProperty scope="context" name="GROYLOG_PORT" source="groylog.port"/>
<springProperty scope="context" name="GROYLOG_MAXIMUMMESSAGESIZE" source="groylog.maximumMessageSize"/><appender name="GELF" class="biz.paluch.logging.gelf.logback.GelfLogbackAppender"><host>udp:${GROYLOG_IP}</host><!--graylog 服务器ip--><port>${GROYLOG_PORT}</port><!--graylog udp端口--><version>1.1</version><facility>${APP_NAME}</facility><extractStackTrace>true</extractStackTrace><filterStackTrace>true</filterStackTrace><mdcProfiling>true</mdcProfiling><timestampPattern>yyyy-MM-dd HH:mm:ss,SSSS</timestampPattern><maximumMessageSize>${GROYLOG_MAXIMUMMESSAGESIZE}</maximumMessageSize><!-- This are fields using MDC --><mdcFields>mdcField1,mdcField2</mdcFields><dynamicMdcFields>mdc.*,(mdc|MDC)fields</dynamicMdcFields><includeFullMdc>true</includeFullMdc>
</appender><root level="INFO"><appender-ref ref="GELF"/>
</root>

groylog.ip=192.168.179.191
groylog.port=12201
groylog.maximumMessageSize=8192

 <dependency><groupId>org.graylog2.log4j2</groupId><artifactId>log4j2-gelf</artifactId><version>1.3.1</version>
</dependency>

<GELF name="gelf" server="192.168.179.191" port="12201" hostName="cc-test" protocol="UDP"><PatternLayout pattern="%logger{36} - %msg%n"/><Filters><Filter type="MarkerFilter" marker="FLOW" onMatch="DENY" onMismatch="NEUTRAL"/><Filter type="MarkerFilter" marker="EXCEPTION" onMatch="DENY" onMismatch="ACCEPT"/></Filters><!-- Additional fields --><KeyValuePair key="foo" value="bar"/><KeyValuePair key="jvm" value="${java:vm}"/>
</GELF><Root level="info"><AppenderRef ref="gelf"/>
</Root>