如何使用log4j将错误和信息消息分别记录到syslog中？

Question

log4j.properties：

# configure the root logger
log4j.rootLogger=INFO, SYSLOG

# configure Syslog facility LOCAL6 appender
log4j.appender.SYSLOG=org.apache.log4j.net.SyslogAppender
log4j.appender.SYSLOG.threshold=INFO
log4j.appender.SYSLOG.syslogHost=localhost
log4j.appender.SYSLOG.facility=LOCAL6
log4j.appender.SYSLOG.layout=org.apache.log4j.PatternLayout
log4j.appender.SYSLOG.layout.conversionPattern="MyApp: %d\{ISO8601\}%m\n"

记录器类

import org.apache.log4j.Logger;

public class Log4jAuditLogger {
    private static Logger LOG = Logger.getLogger(Log4jAuditLogger.class);

    public static void log(String message) {
        LOG.info(message);
    }
}

我想将信息（这些是审计消息，我不想在此处记录错误消息）记录到SYSLOG LOCAL6中，并将错误消息（这些是java程序的内部错误消息）记录到SYSLOG LOCAL7中。

我应该如何扩展此类和配置文件来执行此操作？

我使用log4j 1.2。

Answer 1

添加到log4j.properties另一个appender：

# configure the root logger
log4j.rootLogger=INFO, SYSLOG, SYSLOG7

# configure Syslog facility LOCAL6 appender
log4j.appender.SYSLOG=org.apache.log4j.net.SyslogAppender
log4j.appender.SYSLOG.threshold=INFO
log4j.appender.SYSLOG.syslogHost=localhost
log4j.appender.SYSLOG.facility=LOCAL6
log4j.appender.SYSLOG.layout=org.apache.log4j.PatternLayout
log4j.appender.SYSLOG.layout.conversionPattern="MyApp: %d\{ISO8601\}%m\n"

# configure Syslog facility LOCAL7 appender
log4j.appender.SYSLOG7=org.apache.log4j.net.SyslogAppender
log4j.appender.SYSLOG7.threshold=ERROR
#                                  vv change to whatever the host is
log4j.appender.SYSLOG7.syslogHost=localhost 
log4j.appender.SYSLOG7.facility=LOCAL7
log4j.appender.SYSLOG7.layout=org.apache.log4j.PatternLayout
log4j.appender.SYSLOG7.layout.conversionPattern="MyApp: %d\{ISO8601\}%m\n"

编辑评论：

如果SYSLOG7仅记录ERROR（和更高）：将阈值设置为ERROR级别。 以较低级别记录的所有消息都不会显示。

棘手的部分是在Syslog中只显示低级别：

您可以使用过滤器仅记录“低于”例如ERROR级别的消息。

在log4j 2中：PropertyConfigurator不支持过滤器。 因此，您必须更改为XML配置才能使用它 。 有关过滤器，请参阅log4j-Wiki 。

示例“特定级别”

<appender name="info-out" class="org.apache.log4j.FileAppender"> 
            <param name="File" value="info.log"/> 
            <layout class="org.apache.log4j.PatternLayout"> 
                    <param name="ConversionPattern" value="%m%n"/> 
            </layout> 
            <filter class="org.apache.log4j.varia.LevelMatchFilter">
                    <param name="LevelToMatch" value="info" />
                    <param name="AcceptOnMatch" value="true"/>
            </filter>
            <filter class="org.apache.log4j.varia.DenyAllFilter" />
</appender> 

或“等级范围”

<appender name="info-out" class="org.apache.log4j.FileAppender"> 
            <param name="File" value="info.log"/> 
            <layout class="org.apache.log4j.PatternLayout"> 
                    <param name="ConversionPattern" value="%m%n"/> 
            </layout> 
            <filter class="org.apache.log4j.varia.LevelRangeFilter">
                    <param name="LevelMax" value="info"/>
                    <param name="LevelMin" value="info"/>
                    <param name="AcceptOnMatch" value="true"/>
            </filter>
</appender>

Answer 2

在log4j 1.2中，我们可以在属性文件中使用过滤器。 为了完全分离和更好的定制，我认为建议定义更多的记录器。

我的例子：

log4j.properties：

# configure the root logger
log4j.rootLogger=INFO
log4j.logger.auditLogger=INFO,SYSAUDIT
log4j.logger.appLogger=INFO,SYSAPPINFO,SYSAPPERR

log4j.additivity.auditLogger=false
log4j.additivity.appLogger=false

# SYSAUDIT appender
log4j.appender.SYSAUDIT=org.apache.log4j.net.SyslogAppender
log4j.appender.SYSAUDIT.threshold=INFO
log4j.appender.SYSAUDIT.syslogHost=localhost
log4j.appender.SYSAUDIT.facility=LOCAL6
log4j.appender.SYSAUDIT.layout=org.apache.log4j.PatternLayout
log4j.appender.SYSAUDIT.layout.conversionPattern=Audit Info: %d\{ISO8601\} %m\n
log4j.appender.SYSAUDIT.filter.a=org.apache.log4j.varia.LevelRangeFilter
log4j.appender.SYSAUDIT.filter.a.LevelMin=INFO
log4j.appender.SYSAUDIT.filter.a.LevelMax=INFO

# SYSAPPINFO appender
log4j.appender.SYSAPPINFO=org.apache.log4j.net.SyslogAppender
log4j.appender.SYSAPPINFO.threshold=INFO
log4j.appender.SYSAPPINFO.syslogHost=localhost
log4j.appender.SYSAPPINFO.facility=LOCAL5
log4j.appender.SYSAPPINFO.layout=org.apache.log4j.PatternLayout
log4j.appender.SYSAPPINFO.layout.conversionPattern=App Info: %d\{ISO8601\} %m\n
log4j.appender.SYSAPPINFO.filter.a=org.apache.log4j.varia.LevelRangeFilter
log4j.appender.SYSAPPINFO.filter.a.LevelMin=INFO
log4j.appender.SYSAPPINFO.filter.a.LevelMax=INFO

# SYSAPPERR appender
log4j.appender.SYSAPPERR=org.apache.log4j.net.SyslogAppender
log4j.appender.SYSAPPERR.threshold=ERROR
log4j.appender.SYSAPPERR.syslogHost=localhost
log4j.appender.SYSAPPERR.facility=LOCAL5
log4j.appender.SYSAPPERR.layout=org.apache.log4j.PatternLayout
log4j.appender.SYSAPPERR.layout.conversionPattern=App Error: %d\{ISO8601\} %m\n
log4j.appender.SYSAPPERR.filter.a=org.apache.log4j.varia.LevelRangeFilter
log4j.appender.SYSAPPERR.filter.a.LevelMin=ERROR
log4j.appender.SYSAPPERR.filter.a.LevelMax=ERROR

Log4jLogger类：

public class Log4jLogger {
    private static Logger AUDITLOGGER = Logger.getLogger("auditLogger");
    private static Logger APPLOGGER = Logger.getLogger("appLogger");

    public static void audit(String message)
    {
        AUDITLOGGER.info(message);
    }

    public static void error(String message)
    {
        APPLOGGER.error(message);
    }

    public static void info(String message)
    {
        APPLOGGER.info(message);
    }
}