{"id":35581,"date":"2023-12-06T06:55:25","date_gmt":"2023-10-09T21:01:54","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8logcli%e5%9c%a8openshift-4-11-lokistack-5-5%e4%b8%8a%e6%90%9c%e7%b4%a2loki%e7%9a%84%e6%97%a5%e5%bf%97%e3%80%82\/"},"modified":"2024-05-04T12:19:54","modified_gmt":"2024-05-04T04:19:54","slug":"%e6%88%91%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8logcli%e5%9c%a8openshift-4-11-lokistack-5-5%e4%b8%8a%e6%90%9c%e7%b4%a2loki%e7%9a%84%e6%97%a5%e5%bf%97%e3%80%82","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8logcli%e5%9c%a8openshift-4-11-lokistack-5-5%e4%b8%8a%e6%90%9c%e7%b4%a2loki%e7%9a%84%e6%97%a5%e5%bf%97%e3%80%82\/","title":{"rendered":"\u6211\u5c1d\u8bd5\u4f7f\u7528LogCLI\u5728OpenShift 4.11 + LokiStack 5.5\u4e0a\u641c\u7d22Loki\u7684\u65e5\u5fd7"},"content":{"rendered":"<h1>\u603b\u89c8<\/h1>\n<p>LogCLI\u662fGrafana Loki\u7684\u547d\u4ee4\u884c\u754c\u9762\u3002<br \/>\n\u901a\u8fc7\u4f7f\u7528LogCLI\uff0c\u60a8\u53ef\u4ee5\u6267\u884c\u9488\u5bf9Loki\u5b9e\u4f8b\u7684LogQL\u67e5\u8be2\uff0c\u4ece\u800c\u53ef\u4ee5\u901a\u8fc7\u547d\u4ee4\u884c\u754c\u9762\u641c\u7d22\u548c\u63d0\u53d6Loki\u65e5\u5fd7\u3002<br \/>\nGrafana Loki \/ \u5de5\u5177 \/ LogCLI<\/p>\n<p>\u7531\u4e8eLogCLI\u5e76\u975e\u7531OpenShift\uff08\u4ee5\u4e0b\u7b80\u79f0OCP\uff09\u63d0\u4f9b\uff0c\u56e0\u6b64\u6211\u8ba4\u4e3a\u5b83\u4e0d\u53d7\u652f\u6301\u3002\u4f46\u662f\uff0c\u5728OpenShift 4.11 + LokiStack 5.5\u73af\u5883\u4e0b\uff0c\u6211\u5c1d\u8bd5\u4f7f\u7528LogCLI\u6765\u641c\u7d22\u65e5\u5fd7\uff0c\u5e76\u7559\u4e0b\u4e86\u76f8\u5173\u7b14\u8bb0\u3002<\/p>\n<h1>\u5728\u4e2d\u56fd\uff0c\u53ea\u9700\u8981\u4e00\u4e2a\u9009\u9879\uff1f<\/h1>\n<p>\u53c2\u8003\u94fe\u63a5<\/p>\n<p>Grafana Loki \/ \u5de5\u5177 \/ \u65e5\u5fd7CLI (\u547d\u4ee4\u884c\u754c\u9762)<br \/>\nLoki \u53d1\u5e03\u9875\u9762<\/p>\n<p>Grafana Loki \/ LogQL:<br \/>\nGrafana Loki \/ LogQL\uff1a<\/p>\n<p>Grafana Loki \/ HTTP API: Grafana Loki \/ HTTP \u5e94\u7528\u7a0b\u5e8f\u7f16\u7a0b\u63a5\u53e3<br \/>\nLoki-Operator Docs \/ API: Loki-Operator \u6587\u6863 \/ \u5e94\u7528\u7a0b\u5e8f\u7f16\u7a0b\u63a5\u53e3<\/p>\n<h1>\u6d4b\u8bd5\u73af\u5883<\/h1>\n<p>\u672c\u6b21\u4f7f\u7528\u7684\u662f\u4ee5\u4e0b\u94fe\u63a5\u4e2d\u7684\u6b65\u9aa4\uff0c\u5728\u4f7f\u7528\u57fa\u4e8e\u88f8\u91d1\u5c5eUPI\u5f15\u5165\u7684OpenShift 4.11\u7684\u672c\u5730\u73af\u5883\u4e2d\u5b89\u88c5\u4e86LokiStack + Vector\u3002<br \/>\nQiita \/ \u5728\u57fa\u4e8e\u88f8\u91d1\u5c5eUPI\u5f15\u5165\u7684OpenShift 4.11\u4e2d\u5c1d\u8bd5\u5b89\u88c5\u4e86LokiStack + Vector\u3002<\/p>\n<p>\u5728\u9a8c\u8bc1\u8fc7\u7a0b\u4e2d\uff0c\u6211\u4eec\u4f7f\u7528\u4e86\u6700\u65b0\u7684Logging 5.5.5\u7248\u672c\u3002<\/p>\n<p>OCP: \u53ea\u9700\u4e00\u79cd\u9009\u62e9\uff0c\u5c06\u4ee5\u4e0b\u5185\u5bb9\u4ee5\u4e2d\u6587\u8fdb\u884c\u540c\u4e49\u6539\u5199\uff1a<\/p>\n<div>\n<div class=\"post-table\">OCPversionnotesOCP4.11.16<\/div>\n<\/div>\n<p>\u8fd0\u8425\u5546<\/p>\n<div>\n<div class=\"post-table\">OperatorversionnotesLocal Storage4.11.0For Storage (Prerequise of ODF on on-pre env)OpenShift Data Foundation4.11.4For Storage (Block and Object)Loki Operator5.5.5For Logging (Lokistack)Red Hat OpenShift Logging5.5.5For Logging (ClusterLogging and Vector)<\/div>\n<\/div>\n<h1>\u5b89\u88c5LogCLI<\/h1>\n<p>\u60a8\u53ef\u4ee5\u5728Grafana Loki \/ Tools \/ LogCLI\u4e2d\u7684Loki releases\u9875\u9762\u4e2d\u627e\u5230LogCLI\u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\u4e0b\u8f7d\u94fe\u63a5\u3002\u672c\u6b21\u9a8c\u8bc1\u4e0b\u8f7d\u4e86\u6700\u65b0\u76842.7.2\u7248\u672c\u7684logcli-2.7.1.x86_64.rpm\uff0c\u5e76\u5c06\u5176\u653e\u7f6e\u5728\u8df3\u677f\u670d\u52a1\u5668\u4e0a\uff0c\u7136\u540e\u8fdb\u884c\u4e86rpm\u7684\u5b89\u88c5\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@bastion-01 loki]# rpm <span class=\"nt\">-ivh<\/span> logcli-2.7.1.x86_64.rpm\r\n\u8b66\u544a: logcli-2.7.1.x86_64.rpm: \u30d8\u30c3\u30c0\u30fc V4 RSA\/SHA256 Signature\u3001\u9375 ID 24098cb6: NOKEY\r\nVerifying...                          <span class=\"c\">################################# [100%]<\/span>\r\n\u6e96\u5099\u3057\u3066\u3044\u307e\u3059...              <span class=\"c\">################################# [100%]<\/span>\r\n\u66f4\u65b0\u4e2d \/ \u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u4e2d...\r\n   1:logcli-0:2.7.1-1                 <span class=\"c\">################################# [100%]<\/span>\r\n<span class=\"o\">[<\/span>root@bastion-01 loki]#\r\n<span class=\"o\">[<\/span>root@bastion-01 loki]# logcli <span class=\"nt\">--version<\/span>\r\nlogcli, version HEAD-e0af1cc <span class=\"o\">(<\/span>branch: HEAD, revision: e0af1cc8a<span class=\"o\">)<\/span>\r\n  build user:       root@5004faa13e2e\r\n  build <span class=\"nb\">date<\/span>:       2022-12-09T19:23:40Z\r\n  go version:       go1.19.2\r\n  platform:         linux\/amd64\r\n<span class=\"o\">[<\/span>root@bastion-01 loki]#\r\n<\/code><\/pre>\n<h1>LogCLI\u6807\u7b7e\u7684\u81ea\u52a8\u8865\u5168\u8bbe\u7f6e<\/h1>\n<p>Grafana Loki \/ \u5de5\u5177 \/ LogCLI \/ \u8bbe\u7f6e\u547d\u4ee4\u81ea\u52a8\u8865\u5168<\/p>\n<p>\u5728 ~\/.bashrc \u6587\u4ef6\u4e2d\u6dfb\u52a0 eval &#8220;$(logcli &#8211;completion-script-bash)&#8221; \u8fd9\u4e00\u884c\uff0c\u7136\u540e\u91cd\u65b0\u52a0\u8f7d\uff0c\u5c31\u53ef\u4ee5\u5b9e\u73b0\u9009\u9879\u5361\u81ea\u52a8\u5b8c\u6210\u7684\u529f\u80fd\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@bastion-01 ~]# vi .bashrc\r\n<span class=\"o\">[<\/span>root@bastion-01 ~]#\r\n<span class=\"o\">[<\/span>root@bastion-01 ~]# <span class=\"nb\">grep <\/span>logcli <span class=\"k\">${<\/span><span class=\"nv\">HOME<\/span><span class=\"k\">}<\/span>\/.bashrc\r\n<span class=\"nb\">eval<\/span> <span class=\"s2\">\"<\/span><span class=\"si\">$(<\/span>logcli <span class=\"nt\">--completion-script-bash<\/span><span class=\"si\">)<\/span><span class=\"s2\">\"<\/span>\r\n<span class=\"o\">[<\/span>root@bastion-01 ~]#\r\n<span class=\"o\">[<\/span>root@bastion-01 ~]# <span class=\"nb\">source<\/span> .bashrc\r\n<span class=\"o\">[<\/span>root@bastion-01 ~]#\r\n<span class=\"o\">[<\/span>root@bastion-01 ~]# logcli &lt;Tab&gt;\r\n<span class=\"nb\">help           <\/span>instant-query  labels         query          series\r\n<span class=\"o\">[<\/span>root@bastion-01 ~]# logcli\r\n<\/code><\/pre>\n<h1>\u8bf7\u53c2\u8003\u547d\u4ee4\u5e2e\u52a9\u3002<\/h1>\n<p>\u4ee5\u4e0b\u662f\u5173\u4e8e\u672c\u6b21\u4f7f\u7528\u7684logcli\u3001logcli query\u548clogcli labels\u7684\u547d\u4ee4\u9009\u9879\uff0c\u5176\u4e2d\u8fd8\u5305\u542b\u4e86\u4e00\u4e9b\u5e2e\u52a9\u4fe1\u606f\u3002<br \/>\n\u5728Grafana Loki \/ \u5de5\u5177 \/ LogCLI \/ LogCLI\u547d\u4ee4\u53c2\u8003\u4e2d\u4e5f\u6709\u76f8\u5173\u5185\u5bb9\u3002<\/p>\n<h1>LogQL\u65e5\u5fd7\u67e5\u8be2\u8bed\u8a00<\/h1>\n<p>Loki\u3067\u30ed\u30b0\u3092\u691c\u7d22\u3059\u308b\u969b\u306b\u306f\u3001LogQL\u3067query\u3092\u3057\u307e\u3059\u3002<br \/>\nLoki\u3067\u306fLogQL\u3092\u4f7f\u3044\u3053\u306a\u305b\u3070\u30ed\u30b0\u3092\u306b\u67d4\u8edf\u306b\u691c\u7d22\u3067\u304d\u308b\u3068\u3053\u308d\u304c\u4e00\u3064\u306e\u7279\u5fb4\u306e\u3088\u3046\u3067\u3059\u3002<br \/>\nLogQL\u306equery\u306e\u6307\u5b9a\u306e\u4ed5\u65b9\u306f\u4ee5\u4e0b\u306b\u8a18\u8f09\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<p>Grafana Loki \/ LogQL<br \/>\nGrafana Loki \/ LogQL \/ \u65e5\u5fd7\u67e5\u8be2<\/p>\n<h1>\u4eceOCP\u63a7\u5236\u53f0\u4e2d\u67e5\u770bLogQL\u3002<\/h1>\n<p>\u7531\u4e8e\u4e0d\u719f\u6089LogQL\uff0c\u6211\u4e0d\u77e5\u9053\u5982\u4f55\u7acb\u5373\u6307\u5b9a\u67e5\u8be2\uff0c\u6240\u4ee5\u5728OCP\u63a7\u5236\u53f0\u7684\u65e5\u5fd7\u754c\u9762\u4e0a\u8fdb\u884c\u4e86\u5b9e\u9645\u786e\u8ba4\u3002<br \/>\n\u5728OCP\u7684\u65e5\u5fd7\u754c\u9762\u4e0a\u663e\u793a\u201c\u663e\u793a\u67e5\u8be2\u201d\u540e\uff0c\u53ef\u4ee5\u663e\u793a\u7528\u4e8e\u641c\u7d22\u6761\u4ef6\u7684LogQL\u5b57\u7b26\u4e32\u3002<br \/>\n\u56e0\u6b64\uff0c\u6211\u5148\u5728\u63a7\u5236\u53f0\u4e0a\u8fdb\u884c\u4e86\u51e0\u6b21\u641c\u7d22\uff0c\u4ee5\u67e5\u770bLogQL\u7684\u641c\u7d22\u65b9\u5f0f\u3002<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d243737434c4406c2dd39\/28-0.png\" alt=\"2023-01-12-20-10-07.png\" \/><\/div>\n<p>Show Query\u3092\u958b\u3044\u3066\u304a\u304f\u3068\u3001Log\u306e\u691c\u7d22\u6761\u4ef6\u3068\u3057\u3066\u3001Namespace\u3084Content\u3001Severity\u3092\u9078\u629e\u3057\u305f\u969b\u306e\u5b9f\u969b\u306b\u767a\u884c\u3055\u308c\u3066\u3044\u308bLogQL\u3067\u306eQuery\u306e\u4ed5\u65b9\u304c\u308f\u304b\u308b\u306e\u3067\u3053\u3061\u3089\u3082\u53c2\u8003\u306b\u306a\u308a\u307e\u3057\u305f\u3002<\/p>\n<ul class=\"post-ul\">Namesapce\u3067test\u3001Severity\u3067warning\u3092\u9078\u629e\u3057\u3066\u307f\u305f\u5834\u5408\u306eLogQL<\/ul>\n<pre class=\"post-pre\"><code>{ log_type=~\".+\", kubernetes_namespace_name=\"test\" } | json | level=~\"warn|warning\"\r\n<\/code><\/pre>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d243737434c4406c2dd39\/32-0.png\" alt=\"2023-01-12-20-17-16.png\" \/><\/div>\n<p>test\u3068\u3044\u3046\u6587\u5b57\u5217\u691c\u7d22\u3092\u8ffd\u52a0<\/p>\n<pre class=\"post-pre\"><code>{ log_type=~\".+\", kubernetes_namespace_name=\"test\" } |= \"test\" | json | level=~\"warn|warning\"\r\n<\/code><\/pre>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d243737434c4406c2dd39\/35-0.png\" alt=\"2023-01-12-20-19-23.png\" \/><\/div>\n<ul class=\"post-ul\">Pod\u540d\u3082\u691c\u7d22\u306b\u8ffd\u52a0<\/ul>\n<pre class=\"post-pre\"><code>{ log_type=~\".+\", kubernetes_namespace_name=\"test\", kubernetes_pod_name=\"nginx-sample-785f776647-zlw4c\" } |= \"test\" | json | level=~\"warn|warning\"\r\n<\/code><\/pre>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d243737434c4406c2dd39\/38-0.png\" alt=\"2023-01-12-20-19-54.png\" \/><\/div>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d243737434c4406c2dd39\/39-0.png\" alt=\"2023-01-12-20-11-05.png\" \/><\/div>\n<h1>logcli\u547d\u4ee4\u7684\u6267\u884c\u793a\u4f8b<\/h1>\n<p>\u6211\u5c06\u5c1d\u8bd5\u4f7f\u7528logcli\u63d0\u53d6\u5728OCP\u63a7\u5236\u53f0\u65e5\u5fd7\u754c\u9762\u4e2d\u53ef\u4ee5\u786e\u8ba4\u7684\u65e5\u5fd7\u3002<\/p>\n<h1>logcli\u7684\u8fde\u63a5\u76ee\u6807<\/h1>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d243737434c4406c2dd39\/43-0.png\" alt=\"undefined\" \/><\/div>\n<p>\u30ed\u30b0\u691c\u7d22\u306b\u95a2\u3059\u308bAPI\u306f\u3001Grafana Loki \/ HTTP API\u3092\u53c2\u7167\u3059\u308b\u3068\u3001Loki\u306equerier\u304bquery frontend\u306e\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u3067\u516c\u958b\u3055\u308c\u3066\u3044\u308b\u3088\u3046\u3067\u3057\u305f\u3002<br \/>\n(\u629c\u7c8b)<\/p>\n<blockquote><p>These endpoints are exposed by the querier and the query frontend:<\/p>\n<p>GET \/loki\/api\/v1\/query<br \/>\nGET \/loki\/api\/v1\/query_range<br \/>\nGET \/loki\/api\/v1\/labels<br \/>\nGET \/loki\/api\/v1\/label\/\/values<br \/>\nGET \/loki\/api\/v1\/series<br \/>\nGET \/loki\/api\/v1\/index\/stats<br \/>\nGET \/loki\/api\/v1\/tail<br \/>\nPOST \/loki\/api\/v1\/push<br \/>\nGET \/ready<br \/>\nGET \/metrics<\/p><\/blockquote>\n<p>\u5b9f\u969b\u3084\u3063\u3066\u307f\u3066\u3082querier\u3067\u3082query frontend\u3067\u3082logcli\u3067\u60c5\u5831\u306f\u53d6\u5f97\u3067\u304d\u307e\u3057\u305f\u304c\u3001\u4e0a\u8ff0\u306e\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u56f3\u3092\u898b\u308b\u3068query frontend\u304b\u3089\u691c\u7d22\u3057\u305f\u307b\u3046\u304c\u826f\u3044\u306e\u304b\uff1f\u3068\u601d\u3044\u3001\u4eca\u56de\u306fquery frontend\u7d4c\u7531\u3067\u60c5\u5831\u3092\u53d6\u5f97\u3059\u308b\u3053\u3068\u306b\u3057\u3066\u307f\u307e\u3057\u305f\u3002<br \/>\n(\u3053\u308c\u304c\u59a5\u5f53\u306a\u306e\u304b\u306f\u3069\u3046\u306a\u306e\u3060\u308d\u3046\u304b\u307e\u3060\u3088\u304f\u308f\u304b\u3063\u3066\u3044\u307e\u305b\u3093\u3002\u3002)<\/p>\n<h2>\u5728logcli\u4e2d\u6307\u5b9a\u8fde\u63a5\u76ee\u6807\u7684\u65b9\u6cd5\u3002<\/h2>\n<p>logcli\u547d\u4ee4\u7684\u8fde\u63a5\u76ee\u6807\u53ef\u4ee5\u901a\u8fc7\u547d\u4ee4\u9009\u9879\u7684&#8211;addr\u53c2\u6570\u6216\u8005\u73af\u5883\u53d8\u91cfLOKI_ADDR\u8fdb\u884c\u6307\u5b9a\u3002Grafana Loki \/ Tools \/ LogCLI \/ LogCLI\u4f7f\u7528\u65b9\u6cd5 \/ Grafana Cloud\u793a\u4f8b\u3002<\/p>\n<p>\u7531\u4e8eLokistack\u7684\u9ed8\u8ba4\u8bbe\u7f6e\u53ea\u6709\u9488\u5bf9logging-lokistack-gateway\u7684\u8def\u7531\uff0c\u6240\u4ee5\u65e0\u6cd5\u76f4\u63a5\u8fde\u63a5\u5230logging-lokistack-query-frontend\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@bastion-01 ~]# oc get route <span class=\"nt\">-n<\/span> openshift-logging\r\nNAME                HOST\/PORT                                                           PATH   SERVICES                         PORT     TERMINATION   WILDCARD\r\nlogging-lokistack   logging-lokistack-openshift-logging.apps.cluster-01.example.local          logging-lokistack-gateway-http   public   reencrypt     None\r\n<span class=\"o\">[<\/span>root@bastion-01 ~]#\r\n<\/code><\/pre>\n<p>\u6211\u66fe\u7ecf\u5c1d\u8bd5\u8fc7\u5728logging-lokistack-query-frontend\u7684Service\u4e2d\u66b4\u9732logging-lokistack-query-frontend-http\uff0c\u5e76\u521b\u5efa\u4e86\u8def\u7531\uff0c\u4f46\u662f\u5e76\u6ca1\u6709\u5f88\u987a\u5229\u5730\u8fdb\u884c\u4e0b\u53bb\u3002<\/p>\n<p>\u800c\u4e14\uff0c\u7531\u4e8elogcli\u8fd8\u6709\u4e00\u4e2a\u540d\u4e3a&#8211;proxy-url\u7684\u9009\u9879\uff0c\u6240\u4ee5\u6211\u5c1d\u8bd5\u4f7f\u7528\u8fd9\u4e2a\u9009\u9879\u6765\u8fdb\u884c\u5404\u79cd\u6307\u5b9a\uff0c\u4f46\u662f\u8fd9\u4e2a\u4e5f\u5e76\u4e0d\u987a\u5229\u3002<\/p>\n<p>\u4e5f\u8bb8\uff0c\u5982\u679c\u518d\u4ed4\u7ec6\u8c03\u67e5\u4e00\u4e0b\uff0c\u5c31\u80fd\u627e\u5230\u66f4\u597d\u7684\u89e3\u51b3\u65b9\u6cd5\uff0c\u4f46\u6211\u6682\u65f6\u653e\u5f03\u4e86\uff0c\u53ea\u662f\u901a\u8fc7\u7c97\u7cd9\u7684\u65b9\u5f0f\uff0c\u5373\u901a\u8fc7\u7aef\u53e3\u8f6c\u53d1query-frontend\u7684Pod\u7684Service\uff0c\u6765\u786e\u8ba4logcli\u53ef\u4ee5\u6b63\u5e38\u8fd0\u884c\u3002<\/p>\n<p>\u9996\u5148\uff0c\u6211\u4eec\u5c06\u68c0\u67e5\u4e0eLoki\u76f8\u5173\u7684\u7ec4\u4ef6\u8d44\u6e90\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@bastion-01 ~]# oc get deployment <span class=\"nt\">-n<\/span> openshift-logging\r\nNAME                               READY   UP-TO-DATE   AVAILABLE   AGE\r\ncluster-logging-operator           1\/1     1            1           184d\r\nlogging-lokistack-distributor      2\/2     2            2           8d\r\nlogging-lokistack-gateway          1\/1     1            1           8d\r\nlogging-lokistack-querier          2\/2     2            2           8d\r\nlogging-lokistack-query-frontend   2\/2     2            2           8d\r\nlogging-view-plugin                1\/1     1            1           8d\r\n<span class=\"o\">[<\/span>root@bastion-01 ~]#\r\n<span class=\"o\">[<\/span>root@bastion-01 ~]# oc get statefulset <span class=\"nt\">-n<\/span> openshift-logging\r\nNAME                              READY   AGE\r\nlogging-lokistack-compactor       1\/1     8d\r\nlogging-lokistack-index-gateway   2\/2     8d\r\nlogging-lokistack-ingester        2\/2     8d\r\n<span class=\"o\">[<\/span>root@bastion-01 ~]#\r\n<span class=\"o\">[<\/span>root@bastion-01 ~]# oc get daemonset <span class=\"nt\">-n<\/span> openshift-logging\r\nNAME        DESIRED   CURRENT   READY   UP-TO-DATE   AVAILABLE   NODE SELECTOR            AGE\r\ncollector   11        11        11      11           11          kubernetes.io\/os<span class=\"o\">=<\/span>linux   8d\r\n<span class=\"o\">[<\/span>root@bastion-01 ~]#\r\n<\/code><\/pre>\n<p>\u5728\u4e2d\u56fd\u7684\u6bcd\u8bed\u4e2d\uff0c\u53ea\u6709\u4e00\u4e2a\u9009\u9879\uff1a<br \/>\n\u53ea\u6709\u4e00\u6761\u8def\u7531\u5b58\u5728\uff0c\u540d\u79f0\u4e3alogging-lokistack-gateway-http\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@bastion-01 ~]# oc get route <span class=\"nt\">-n<\/span> openshift-logging\r\nNAME                HOST\/PORT                                                           PATH   SERVICES                         PORT     TERMINATION   WILDCARD\r\nlogging-lokistack   logging-lokistack-openshift-logging.apps.cluster-01.example.local          logging-lokistack-gateway-http   public   reencrypt     None\r\n<span class=\"o\">[<\/span>root@bastion-01 ~]#\r\n<\/code><\/pre>\n<p>\u6211\u4f1a\u68c0\u67e5\u670d\u52a1\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@bastion-01 ~]# oc get svc <span class=\"nt\">-n<\/span> openshift-logging\r\nNAME                                    TYPE        CLUSTER-IP       EXTERNAL-IP   PORT<span class=\"o\">(<\/span>S<span class=\"o\">)<\/span>                      AGE\r\ncluster-logging-operator-metrics        ClusterIP   172.30.127.223   &lt;none&gt;        8686\/TCP                     184d\r\ncollector                               ClusterIP   172.30.176.100   &lt;none&gt;        24231\/TCP,2112\/TCP           8d\r\nlogging-lokistack-compactor-grpc        ClusterIP   None             &lt;none&gt;        9095\/TCP                     8d\r\nlogging-lokistack-compactor-http        ClusterIP   172.30.240.41    &lt;none&gt;        3100\/TCP                     8d\r\nlogging-lokistack-distributor-grpc      ClusterIP   None             &lt;none&gt;        9095\/TCP                     8d\r\nlogging-lokistack-distributor-http      ClusterIP   172.30.182.1     &lt;none&gt;        3100\/TCP                     8d\r\nlogging-lokistack-gateway-http          ClusterIP   172.30.107.150   &lt;none&gt;        8080\/TCP,8081\/TCP,8083\/TCP   8d\r\nlogging-lokistack-gossip-ring           ClusterIP   None             &lt;none&gt;        7946\/TCP                     8d\r\nlogging-lokistack-index-gateway-grpc    ClusterIP   None             &lt;none&gt;        9095\/TCP                     8d\r\nlogging-lokistack-index-gateway-http    ClusterIP   172.30.226.220   &lt;none&gt;        3100\/TCP                     8d\r\nlogging-lokistack-ingester-grpc         ClusterIP   None             &lt;none&gt;        9095\/TCP                     8d\r\nlogging-lokistack-ingester-http         ClusterIP   172.30.108.174   &lt;none&gt;        3100\/TCP                     8d\r\nlogging-lokistack-querier-grpc          ClusterIP   None             &lt;none&gt;        9095\/TCP                     8d\r\nlogging-lokistack-querier-http          ClusterIP   172.30.46.182    &lt;none&gt;        3100\/TCP                     8d\r\nlogging-lokistack-query-frontend-grpc   ClusterIP   None             &lt;none&gt;        9095\/TCP                     8d\r\nlogging-lokistack-query-frontend-http   ClusterIP   172.30.159.175   &lt;none&gt;        3100\/TCP                     8d\r\nlogging-view-plugin                     ClusterIP   172.30.36.124    &lt;none&gt;        9443\/TCP                     8d\r\n<span class=\"o\">[<\/span>root@bastion-01 ~]#\r\n<\/code><\/pre>\n<p>\u6211\u6253\u7b97\u8fd9\u6b21\u8fde\u63a5\u5230logging-lokistack-query-frontend\uff0c\u6240\u4ee5\u6682\u65f6\u5c06logging-lokistack-query-frontend-http\u7684\u670d\u52a1\u7aef\u53e3\u8f6c\u53d1\u3002<\/p>\n<pre class=\"post-pre\"><code>oc port-forward svc\/logging-lokistack-querier-http 3100\r\n<\/code><\/pre>\n<p>\u51fa\u529b\u7684\u4f8b\u5b50<\/p>\n<pre class=\"post-pre\"><code>[root@bastion-01 ~]# oc port-forward svc\/logging-lokistack-querier-http 3100\r\nForwarding from 127.0.0.1:3100 -&gt; 3100\r\nForwarding from [::1]:3100 -&gt; 3100\r\n<\/code><\/pre>\n<p>\u6211\u4f1a\u6253\u5f00\u53e6\u4e00\u4e2a\u7ec8\u7aef\uff0c\u5e76\u5c1d\u8bd5\u4f7f\u7528logcli\u8fdb\u884c\u8fde\u63a5\u3002<br \/>\n\u4f5c\u4e3alogcli\u7684\u9009\u9879\uff0c\u6211\u5c06\u6307\u5b9a\u4ee5\u4e0b\u5185\u5bb9\u3002<\/p>\n<div>\n<div class=\"post-table\">optionnotes<code>--addr=https:\/\/localhost:3100<\/code>\u30ed\u30b0\u691c\u7d22\u306b\u95a2\u3059\u308bAPI\u3092\u516c\u958b\u3057\u3066\u3044\u308bLoki\u306e<code>querier<\/code>\u304b<code>query frontend<\/code>\u306e\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u306eURL\u3002<br \/>\n\u4eca\u56de\u306f<code>query frontend<\/code>\u3092\u30ed\u30fc\u30ab\u30eb\u306bportfowared\u3057\u305fURL\u3092\u6307\u5b9a\u3002<code>--tls-skip-verify<\/code>SSL\u8a3c\u660e\u66f8\u3092\u7121\u8996\u3059\u308b\u3002<code>--org-id=\"infrastructure\/application\/audit\"<\/code>Loki\u306eAPI\u3067\u306e<code>tenant ID<\/code>\u3068\u3044\u3046\u3082\u306e\u3002<br \/>\nOCP\u30b3\u30f3\u30bd\u30fc\u30eb\u306eLog\u753b\u9762\u3067\u6307\u5b9a\u3059\u308b<code>infrastructure<\/code>\/<code>appliaction<\/code>\/<code>audit<\/code>\u306b\u5bfe\u5fdc\u3057\u3066\u3044\u308b\u6a21\u69d8\u3002<\/div>\n<\/div>\n<p>\u4f7f\u7528\u8fd9\u4e9b\u9009\u9879\u6765\u6267\u884clogcli labels\u3001logcli query\u7b49\u64cd\u4f5c\u3002<\/p>\n<h2>\u786e\u8ba4\u6807\u7b7e<\/h2>\n<p>\u9996\u5148\u6211\u4eec\u6765\u770b\u4e00\u4e0blogcli labels\u3002<\/p>\n<p>\u60a8\u53ef\u4ee5\u5728\u4ee5\u4e0b\u4f4d\u7f6e\u67e5\u770blogcli labels\u547d\u4ee4\u7684\u9009\u9879\uff1aGrafana Loki \/\u5de5\u5177\/ LogCLI \/ LogCLI\u547d\u4ee4\u53c2\u8003\/ LogCLI\u6807\u7b7e\u547d\u4ee4\u53c2\u8003\u3002<\/p>\n<p>\u5982\u679c\u79df\u6237ID\u662f\u57fa\u7840\u8bbe\u65bd\u7684\u8bdd<\/p>\n<pre class=\"post-pre\"><code>logcli <span class=\"nt\">--addr<\/span><span class=\"o\">=<\/span>https:\/\/localhost:3100 <span class=\"nt\">--tls-skip-verify<\/span> <span class=\"nt\">--org-id<\/span><span class=\"o\">=<\/span>infrastructure labels\r\nlogcli <span class=\"nt\">--addr<\/span><span class=\"o\">=<\/span>https:\/\/localhost:3100 <span class=\"nt\">--tls-skip-verify<\/span> <span class=\"nt\">--org-id<\/span><span class=\"o\">=<\/span>application labels\r\n<\/code><\/pre>\n<p>\u4f8b\u5b50\u7684\u8f93\u51fa<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@bastion-01 ~]# logcli <span class=\"nt\">--addr<\/span><span class=\"o\">=<\/span>https:\/\/localhost:3100 <span class=\"nt\">--tls-skip-verify<\/span> <span class=\"nt\">--org-id<\/span><span class=\"o\">=<\/span>infrastructure labels\r\n2023\/01\/13 19:50:03 https:\/\/localhost:3100\/loki\/api\/v1\/labels?end<span class=\"o\">=<\/span>1673607003035341060&amp;start<span class=\"o\">=<\/span>1673603403035341060\r\nkubernetes_container_name\r\nkubernetes_host\r\nkubernetes_namespace_name\r\nkubernetes_pod_name\r\nlog_type\r\n<span class=\"o\">[<\/span>root@bastion-01 ~]#\r\n<span class=\"o\">[<\/span>root@bastion-01 ~]# logcli <span class=\"nt\">--addr<\/span><span class=\"o\">=<\/span>https:\/\/localhost:3100 <span class=\"nt\">--tls-skip-verify<\/span> <span class=\"nt\">--org-id<\/span><span class=\"o\">=<\/span>application labels\r\n2023\/01\/13 19:50:10 https:\/\/localhost:3100\/loki\/api\/v1\/labels?end<span class=\"o\">=<\/span>1673607010900039969&amp;start<span class=\"o\">=<\/span>1673603410900039969\r\nkubernetes_container_name\r\nkubernetes_host\r\nkubernetes_namespace_name\r\nkubernetes_pod_name\r\nlog_type\r\n<span class=\"o\">[<\/span>root@bastion-01 ~]#\r\n<\/code><\/pre>\n<p>\uff08\u5728\u4e0d\u52a0\u4e0a&#8211;quiet\u9009\u9879\u7684\u60c5\u51b5\u4e0b\uff0c\u4f7f\u7528curl\u800c\u4e0d\u662flogcli\u53ef\u4ee5\u770b\u5230API\u7684\u5b9e\u9645\u8c03\u7528\u65b9\u5f0f\uff0c\u8fd9\u5bf9\u4e8e\u53c2\u8003\u5f88\u6709\u5e2e\u52a9\u3002\uff09<\/p>\n<h2>\u67e5\u8be2\u7684\u6267\u884c<\/h2>\n<p>\u60a8\u53ef\u4ee5\u5728\u4ee5\u4e0b\u4f4d\u7f6e\u67e5\u770blogcli query\u547d\u4ee4\u7684\u9009\u9879\uff1a<br \/>\nGrafana Loki \/ \u5de5\u5177 \/ LogCLI \/ LogCLI\u547d\u4ee4\u53c2\u8003 \/ LogCLI\u67e5\u8be2\u547d\u4ee4\u53c2\u8003<\/p>\n<h3>\u67e5\u8be2\u7684\u5b9e\u65bd\uff08\u5e94\u7528\uff09<\/h3>\n<p>\u9996\u5148\u6211\u4eec\u6765\u770b\u4e00\u4e0b\u5e94\u7528\u7a0b\u5e8f\u7684\u65e5\u5fd7\u3002\uff08&#8211;org-id=application\uff09<br \/>\n&#8211;output\u9009\u9879\u7684\u6307\u5b9a\u503c\u5982\u4e0b\uff0c\u53ef\u4ee5\u8c03\u6574\u8981\u8f93\u51fa\u7684\u4fe1\u606f\u3002<\/p>\n<pre class=\"post-pre\"><code>raw: log line\r\ndefault: log timestamp + log labels + log line\r\njsonl: JSON response from Loki API of log line\r\n<\/code><\/pre>\n<p>\u5f53\u8f93\u51fa\u8bbe\u7f6e\u4e3a\u9ed8\u8ba4\uff08default\uff09\u65f6\u3002<\/p>\n<p>\u60a8\u53ef\u4ee5\u770b\u5230\u65f6\u95f4\u6233\u3001\u65e5\u5fd7\u6807\u7b7e\u548c\u65e5\u5fd7\u884c\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@bastion-01 ~]# logcli <span class=\"nt\">--addr<\/span><span class=\"o\">=<\/span>https:\/\/localhost:3100 <span class=\"nt\">--tls-skip-verify<\/span> <span class=\"nt\">--org-id<\/span><span class=\"o\">=<\/span>application query <span class=\"nt\">--output<\/span><span class=\"o\">=<\/span>default <span class=\"s1\">'{ log_type=~\".+\", kubernetes_namespace_name=\"test\" } | json'<\/span> | jq\r\n2023\/01\/13 20:18:47 https:\/\/localhost:3100\/loki\/api\/v1\/query_range?direction<span class=\"o\">=<\/span>BACKWARD&amp;end<span class=\"o\">=<\/span>1673608727710659999&amp;limit<span class=\"o\">=<\/span>30&amp;query<span class=\"o\">=<\/span>%7B+log_type%3D~%22.%2B%22%2C+kubernetes_namespace_name%3D%22test%22+%7D+%7C+json&amp;start<span class=\"o\">=<\/span>1673605127710659999\r\n2023\/01\/13 20:18:47 Common labels: <span class=\"o\">{<\/span><span class=\"nv\">file<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"\/var\/log\/pods\/test_nginx-sample-785f776647-zlw4c_aad4ae08-d47b-4a1c-b614-fbaccc375339\/nginx-sample\/0.log\"<\/span>, <span class=\"nb\">hostname<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"worker-01\"<\/span>, <span class=\"nv\">kubernetes_annotations_k8s_v1_cni_cncf_io_network_status<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"[{<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">name<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">openshift-sdn<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">interface<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">eth0<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">ips<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: [<\/span><span class=\"se\">\\n<\/span>        <span class=\"se\">\\\"<\/span><span class=\"s2\">10.131.3.3<\/span><span class=\"se\">\\\"\\n<\/span><span class=\"s2\">    ],<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">default<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: true,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">dns<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: {}<\/span><span class=\"se\">\\n<\/span><span class=\"s2\">}]\"<\/span>, <span class=\"nv\">kubernetes_annotations_k8s_v1_cni_cncf_io_networks_status<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"[{<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">name<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">openshift-sdn<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">interface<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">eth0<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">ips<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: [<\/span><span class=\"se\">\\n<\/span>        <span class=\"se\">\\\"<\/span><span class=\"s2\">10.131.3.3<\/span><span class=\"se\">\\\"\\n<\/span><span class=\"s2\">    ],<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">default<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: true,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">dns<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: {}<\/span><span class=\"se\">\\n<\/span><span class=\"s2\">}]\"<\/span>, <span class=\"nv\">kubernetes_annotations_openshift_io_scc<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"restricted-v2\"<\/span>, <span class=\"nv\">kubernetes_annotations_seccomp_security_alpha_kubernetes_io_pod<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"runtime\/default\"<\/span>, <span class=\"nv\">kubernetes_container_id<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"cri-o:\/\/9de13a3bd7dd97b9557dc8acf71790981591cda55972d32d3a8c1724178739ab\"<\/span>, <span class=\"nv\">kubernetes_container_image<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"image-registry.openshift-image-registry.svc:5000\/test\/nginx-sample@sha256:9661529b8e8bb5307da4c35546ca9165d3fa38c7c36d627027b706c8e3ee5d52\"<\/span>, <span class=\"nv\">kubernetes_container_name<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"nginx-sample\"<\/span>, <span class=\"nv\">kubernetes_container_name_extracted<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"nginx-sample\"<\/span>, <span class=\"nv\">kubernetes_host<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"worker-01\"<\/span>, <span class=\"nv\">kubernetes_labels_app<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"nginx-sample\"<\/span>, <span class=\"nv\">kubernetes_labels_deployment<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"nginx-sample\"<\/span>, <span class=\"nv\">kubernetes_labels_pod_template_hash<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"785f776647\"<\/span>, <span class=\"nv\">kubernetes_namespace_labels_kubernetes_io_metadata_name<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"test\"<\/span>, <span class=\"nv\">kubernetes_namespace_labels_pod_security_kubernetes_io_audit<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"baseline\"<\/span>, <span class=\"nv\">kubernetes_namespace_labels_pod_security_kubernetes_io_audit_version<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"v1.24\"<\/span>, <span class=\"nv\">kubernetes_namespace_labels_pod_security_kubernetes_io_warn<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"baseline\"<\/span>, <span class=\"nv\">kubernetes_namespace_labels_pod_security_kubernetes_io_warn_version<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"v1.24\"<\/span>, <span class=\"nv\">kubernetes_namespace_name<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"test\"<\/span>, <span class=\"nv\">kubernetes_namespace_name_extracted<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"test\"<\/span>, <span class=\"nv\">kubernetes_pod_id<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"aad4ae08-d47b-4a1c-b614-fbaccc375339\"<\/span>, <span class=\"nv\">kubernetes_pod_ip<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"10.131.3.3\"<\/span>, <span class=\"nv\">kubernetes_pod_name<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"nginx-sample-785f776647-zlw4c\"<\/span>, <span class=\"nv\">kubernetes_pod_name_extracted<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"nginx-sample-785f776647-zlw4c\"<\/span>, <span class=\"nv\">kubernetes_pod_owner<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"ReplicaSet\/nginx-sample-785f776647\"<\/span>, <span class=\"nv\">level<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"default\"<\/span>, <span class=\"nv\">log_type<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"application\"<\/span>, <span class=\"nv\">log_type_extracted<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"application\"<\/span><span class=\"o\">}<\/span>\r\n2023\/01\/13 20:18:47 https:\/\/localhost:3100\/loki\/api\/v1\/query_range?direction<span class=\"o\">=<\/span>BACKWARD&amp;end<span class=\"o\">=<\/span>1673606358229544200&amp;limit<span class=\"o\">=<\/span>23&amp;query<span class=\"o\">=<\/span>%7B+log_type%3D~%22.%2B%22%2C+kubernetes_namespace_name%3D%22test%22+%7D+%7C+json&amp;start<span class=\"o\">=<\/span>1673605127710659999\r\nparse error: Invalid numeric literal at line 1, column 14\r\n2023\/01\/13 20:18:47 Common labels: <span class=\"o\">{<\/span><span class=\"nv\">_timestamp<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"2023-01-13T10:39:08.641318527Z\"<\/span>, <span class=\"nv\">file<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"\/var\/log\/pods\/test_nginx-sample-785f776647-zlw4c_aad4ae08-d47b-4a1c-b614-fbaccc375339\/nginx-sample\/0.log\"<\/span>, <span class=\"nb\">hostname<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"worker-01\"<\/span>, <span class=\"nv\">kubernetes_annotations_k8s_v1_cni_cncf_io_network_status<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"[{<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">name<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">openshift-sdn<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">interface<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">eth0<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">ips<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: [<\/span><span class=\"se\">\\n<\/span>        <span class=\"se\">\\\"<\/span><span class=\"s2\">10.131.3.3<\/span><span class=\"se\">\\\"\\n<\/span><span class=\"s2\">    ],<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">default<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: true,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">dns<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: {}<\/span><span class=\"se\">\\n<\/span><span class=\"s2\">}]\"<\/span>, <span class=\"nv\">kubernetes_annotations_k8s_v1_cni_cncf_io_networks_status<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"[{<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">name<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">openshift-sdn<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">interface<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">eth0<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">ips<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: [<\/span><span class=\"se\">\\n<\/span>        <span class=\"se\">\\\"<\/span><span class=\"s2\">10.131.3.3<\/span><span class=\"se\">\\\"\\n<\/span><span class=\"s2\">    ],<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">default<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: true,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">dns<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: {}<\/span><span class=\"se\">\\n<\/span><span class=\"s2\">}]\"<\/span>, <span class=\"nv\">kubernetes_annotations_openshift_io_scc<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"restricted-v2\"<\/span>, <span class=\"nv\">kubernetes_annotations_seccomp_security_alpha_kubernetes_io_pod<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"runtime\/default\"<\/span>, <span class=\"nv\">kubernetes_container_id<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"cri-o:\/\/9de13a3bd7dd97b9557dc8acf71790981591cda55972d32d3a8c1724178739ab\"<\/span>, <span class=\"nv\">kubernetes_container_image<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"image-registry.openshift-image-registry.svc:5000\/test\/nginx-sample@sha256:9661529b8e8bb5307da4c35546ca9165d3fa38c7c36d627027b706c8e3ee5d52\"<\/span>, <span class=\"nv\">kubernetes_container_name<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"nginx-sample\"<\/span>, <span class=\"nv\">kubernetes_container_name_extracted<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"nginx-sample\"<\/span>, <span class=\"nv\">kubernetes_host<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"worker-01\"<\/span>, <span class=\"nv\">kubernetes_labels_app<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"nginx-sample\"<\/span>, <span class=\"nv\">kubernetes_labels_deployment<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"nginx-sample\"<\/span>, <span class=\"nv\">kubernetes_labels_pod_template_hash<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"785f776647\"<\/span>, <span class=\"nv\">kubernetes_namespace_labels_kubernetes_io_metadata_name<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"test\"<\/span>, <span class=\"nv\">kubernetes_namespace_labels_pod_security_kubernetes_io_audit<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"baseline\"<\/span>, <span class=\"nv\">kubernetes_namespace_labels_pod_security_kubernetes_io_audit_version<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"v1.24\"<\/span>, <span class=\"nv\">kubernetes_namespace_labels_pod_security_kubernetes_io_warn<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"baseline\"<\/span>, <span class=\"nv\">kubernetes_namespace_labels_pod_security_kubernetes_io_warn_version<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"v1.24\"<\/span>, <span class=\"nv\">kubernetes_namespace_name<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"test\"<\/span>, <span class=\"nv\">kubernetes_namespace_name_extracted<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"test\"<\/span>, <span class=\"nv\">kubernetes_pod_id<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"aad4ae08-d47b-4a1c-b614-fbaccc375339\"<\/span>, <span class=\"nv\">kubernetes_pod_ip<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"10.131.3.3\"<\/span>, <span class=\"nv\">kubernetes_pod_name<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"nginx-sample-785f776647-zlw4c\"<\/span>, <span class=\"nv\">kubernetes_pod_name_extracted<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"nginx-sample-785f776647-zlw4c\"<\/span>, <span class=\"nv\">kubernetes_pod_owner<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"ReplicaSet\/nginx-sample-785f776647\"<\/span>, <span class=\"nv\">level<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"default\"<\/span>, <span class=\"nv\">log_type<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"application\"<\/span>, <span class=\"nv\">log_type_extracted<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"application\"<\/span>, <span class=\"nv\">message<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"10.130.2.1 - - [13\/Jan\/2023:10:39:08 +0000] <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">GET \/favicon.ico HTTP\/1.1<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\"> 404 555 <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">http:\/\/nginx-sample-test.apps.cluster-01.example.local\/<\/span><span class=\"se\">\\\"<\/span> <span class=\"se\">\\\"<\/span><span class=\"s2\">Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/108.0.0.0 Safari\/537.36<\/span><span class=\"se\">\\\"<\/span> <span class=\"se\">\\\"<\/span><span class=\"s2\">172.16.100.11<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">\"<\/span><span class=\"o\">}<\/span>\r\n<span class=\"o\">[<\/span>root@bastion-01 ~]#\r\n<\/code><\/pre>\n<p>\u5f53\u4f7f\u7528`&#8211;output=jsonl`\u65f6\u3002<\/p>\n<p>\u8fd9\u5c06\u4ee5JSON\u5f62\u5f0f\u663e\u793a\u3002\u53ea\u663e\u793a\u8fd9\u4e2a\u7684\u8bdd\uff0c\u6807\u7b7e\u662f\u6ca1\u6709\u663e\u793a\u7684\u3002<br \/>\n\u800c\u4e14\uff0c\u6211\u8ba4\u4e3a\u65e5\u5fd7\u884c\u90e8\u5206\u4e5f\u6709\u70b9\u4e0d\u592a\u6e05\u6670\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@bastion-01 ~]# logcli <span class=\"nt\">--addr<\/span><span class=\"o\">=<\/span>https:\/\/localhost:3100 <span class=\"nt\">--tls-skip-verify<\/span> <span class=\"nt\">--org-id<\/span><span class=\"o\">=<\/span>application query <span class=\"nt\">--output<\/span><span class=\"o\">=<\/span>jsonl <span class=\"s1\">'{ log_type=~\".+\", kubernetes_namespace_name=\"test\"}'<\/span> | jq\r\n2023\/01\/13 20:20:56 https:\/\/localhost:3100\/loki\/api\/v1\/query_range?direction<span class=\"o\">=<\/span>BACKWARD&amp;end<span class=\"o\">=<\/span>1673608856316991785&amp;limit<span class=\"o\">=<\/span>30&amp;query<span class=\"o\">=<\/span>%7B+log_type%3D~%22.%2B%22%2C+kubernetes_namespace_name%3D%22test%22%7D&amp;start<span class=\"o\">=<\/span>1673605256316991785\r\n2023\/01\/13 20:20:56 Common labels: <span class=\"o\">{<\/span><span class=\"nv\">kubernetes_container_name<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"nginx-sample\"<\/span>, <span class=\"nv\">kubernetes_host<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"worker-01\"<\/span>, <span class=\"nv\">kubernetes_namespace_name<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"test\"<\/span>, <span class=\"nv\">kubernetes_pod_name<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"nginx-sample-785f776647-zlw4c\"<\/span>, <span class=\"nv\">log_type<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"application\"<\/span><span class=\"o\">}<\/span>\r\n<span class=\"o\">{<\/span>\r\n  <span class=\"s2\">\"labels\"<\/span>: <span class=\"o\">{}<\/span>,\r\n  <span class=\"s2\">\"line\"<\/span>: <span class=\"s2\">\"{<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">@timestamp<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">2023-01-13T10:39:28.108631523Z<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">file<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">\/var\/log\/pods\/test_nginx-sample-785f776647-zlw4c_aad4ae08-d47b-4a1c-b614-fbaccc375339\/nginx-sample\/0.log<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">hostname<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">worker-01<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">kubernetes<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:{<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">annotations<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:{<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">k8s.v1.cni.cncf.io\/network-status<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">[{<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">name<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">openshift-sdn<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">interface<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">eth0<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">ips<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: [<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n        <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">10.131.3.3<\/span><span class=\"se\">\\\\\\\"\\\\<\/span><span class=\"s2\">n    ],<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">default<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: true,<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">dns<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: {}<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n}]<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">k8s.v1.cni.cncf.io\/networks-status<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">[{<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">name<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">openshift-sdn<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">interface<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">eth0<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">ips<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: [<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n        <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">10.131.3.3<\/span><span class=\"se\">\\\\\\\"\\\\<\/span><span class=\"s2\">n    ],<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">default<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: true,<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">dns<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: {}<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n}]<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">openshift.io\/scc<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">restricted-v2<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">seccomp.security.alpha.kubernetes.io\/pod<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">runtime\/default<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">},<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">container_id<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">cri-o:\/\/9de13a3bd7dd97b9557dc8acf71790981591cda55972d32d3a8c1724178739ab<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">container_image<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">image-registry.openshift-image-registry.svc:52023\/01\/13 20:20:56 https:\/\/localhost:3100\/loki\/api\/v1\/query_range?direction=BACKWARD&amp;end=1673606358229544200&amp;limit=23&amp;query=%7B+log_type%3D~%22.%2B%22%2C+kubernetes_namespace_name%3D%22test%22%7D&amp;start=1673605256316991785\r\n000\/test\/nginx-sample@sha256:9661529b8e8bb5307da4c35546ca9165d3fa38c7c36d627027b706c8e3ee5d52<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">container_name<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">nginx-sample<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">labels<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:{<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">app<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">nginx-sample<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">deployment<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">nginx-sample<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod-template-hash<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">785f776647<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">},<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">namespace_labels<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:{<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">kubernetes.io\/metadata.name<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">test<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod-security.kubernetes.io\/audit<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">baseline<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod-security.kubernetes.io\/audit-version<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">v1.24<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod-security.kubernetes.io\/warn<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">baseline<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod-security.kubernetes.io\/warn-version<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">v1.24<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">},<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">namespace_name<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">test<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod_id<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">aad4ae08-d47b-4a1c-b614-fbaccc375339<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod_ip<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">10.131.3.3<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod_name<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">nginx-sample-785f776647-zlw4c<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod_owner<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">ReplicaSet\/nginx-sample-785f776647<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">},<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">level<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">default<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">log_type<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">application<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">message<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">10.130.2.1 - - [13\/Jan\/2023:10:39:28 +0000] <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">GET \/ HTTP\/1.1<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\"> 304 0 <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">-<\/span><span class=\"se\">\\\\\\\"<\/span> <span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/108.0.0.0 Safari\/537.36<\/span><span class=\"se\">\\\\\\\"<\/span> <span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">172.16.100.11<\/span><span class=\"se\">\\\\\\\"\\\"<\/span><span class=\"s2\">}\"<\/span>,\r\n  <span class=\"s2\">\"timestamp\"<\/span>: <span class=\"s2\">\"2023-01-13T19:39:28.545469387+09:00\"<\/span>\r\n<span class=\"o\">}<\/span>\r\n\u7565\r\n<\/code><\/pre>\n<p>\u6dfb\u52a0&#8211;quiet\u9009\u9879\u540e\uff0c\u5143\u6570\u636e\u5c06\u4e0d\u4f1a\u663e\u793a\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@bastion-01 ~]# logcli <span class=\"nt\">--addr<\/span><span class=\"o\">=<\/span>https:\/\/localhost:3100 <span class=\"nt\">--tls-skip-verify<\/span> <span class=\"nt\">--org-id<\/span><span class=\"o\">=<\/span>application query <span class=\"nt\">--quiet<\/span> <span class=\"nt\">--output<\/span><span class=\"o\">=<\/span>jsonl <span class=\"s1\">'{ log_type=~\".+\", kubernetes_namespace_name=\"test\"}'<\/span> | jq\r\n<span class=\"o\">{<\/span>\r\n  <span class=\"s2\">\"labels\"<\/span>: <span class=\"o\">{}<\/span>,\r\n  <span class=\"s2\">\"line\"<\/span>: <span class=\"s2\">\"{<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">@timestamp<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">2023-01-13T10:39:28.108631523Z<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">file<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">\/var\/log\/pods\/test_nginx-sample-785f776647-zlw4c_aad4ae08-d47b-4a1c-b614-fbaccc375339\/nginx-sample\/0.log<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">hostname<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">worker-01<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">kubernetes<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:{<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">annotations<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:{<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">k8s.v1.cni.cncf.io\/network-status<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">[{<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">name<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">openshift-sdn<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">interface<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">eth0<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">ips<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: [<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n        <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">10.131.3.3<\/span><span class=\"se\">\\\\\\\"\\\\<\/span><span class=\"s2\">n    ],<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">default<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: true,<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">dns<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: {}<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n}]<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">k8s.v1.cni.cncf.io\/networks-status<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">[{<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">name<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">openshift-sdn<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">interface<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">eth0<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">ips<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: [<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n        <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">10.131.3.3<\/span><span class=\"se\">\\\\\\\"\\\\<\/span><span class=\"s2\">n    ],<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">default<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: true,<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">dns<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: {}<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n}]<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">openshift.io\/scc<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">restricted-v2<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">seccomp.security.alpha.kubernetes.io\/pod<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">runtime\/default<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">},<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">container_id<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">cri-o:\/\/9de13a3bd7dd97b9557dc8acf71790981591cda55972d32d3a8c1724178739ab<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">container_image<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">image-registry.openshift-image-registry.svc:5000\/test\/nginx-sample@sha256:9661529b8e8bb5307da4c35546ca9165d3fa38c7c36d627027b706c8e3ee5d52<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">container_name<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">nginx-sample<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">labels<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:{<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">app<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">nginx-sample<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">deployment<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">nginx-sample<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod-template-hash<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">785f776647<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">},<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">namespace_labels<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:{<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">kubernetes.io\/metadata.name<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">test<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod-security.kubernetes.io\/audit<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">baseline<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod-security.kubernetes.io\/audit-version<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">v1.24<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod-security.kubernetes.io\/warn<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">baseline<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod-security.kubernetes.io\/warn-version<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">v1.24<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">},<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">namespace_name<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">test<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod_id<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">aad4ae08-d47b-4a1c-b614-fbaccc375339<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod_ip<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">10.131.3.3<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod_name<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">nginx-sample-785f776647-zlw4c<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod_owner<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">ReplicaSet\/nginx-sample-785f776647<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">},<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">level<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">default<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">log_type<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">application<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">message<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">10.130.2.1 - - [13\/Jan\/2023:10:39:28 +0000] <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">GET \/ HTTP\/1.1<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\"> 304 0 <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">-<\/span><span class=\"se\">\\\\\\\"<\/span> <span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/108.0.0.0 Safari\/537.36<\/span><span class=\"se\">\\\\\\\"<\/span> <span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">172.16.100.11<\/span><span class=\"se\">\\\\\\\"\\\"<\/span><span class=\"s2\">}\"<\/span>,\r\n  <span class=\"s2\">\"timestamp\"<\/span>: <span class=\"s2\">\"2023-01-13T19:39:28.545469387+09:00\"<\/span>\r\n<span class=\"o\">}<\/span>\r\n\u7565\r\n<\/code><\/pre>\n<p>\u5c06json\u4f5c\u4e3a\u641c\u7d22\u6761\u4ef6\u65f6\uff0clabels\u90e8\u5206\u4e2d\u4f1a\u663e\u793a_timestamp\u548cmesage\u3002\u7136\u800c\uff0clog line\u90e8\u5206\u4ecd\u7136\u96be\u4ee5\u9605\u8bfb\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@bastion-01 ~]# logcli <span class=\"nt\">--addr<\/span><span class=\"o\">=<\/span>https:\/\/localhost:3100 <span class=\"nt\">--tls-skip-verify<\/span> <span class=\"nt\">--org-id<\/span><span class=\"o\">=<\/span>application query <span class=\"nt\">--quiet<\/span> <span class=\"nt\">--output<\/span><span class=\"o\">=<\/span>jsonl <span class=\"s1\">'{ log_type=~\".+\", kubernetes_namespace_name=\"test\" } | json'<\/span> | jq\r\n<span class=\"o\">{<\/span>\r\n  <span class=\"s2\">\"labels\"<\/span>: <span class=\"o\">{<\/span>\r\n    <span class=\"s2\">\"_timestamp\"<\/span>: <span class=\"s2\">\"2023-01-13T10:39:28.108631523Z\"<\/span>,\r\n    <span class=\"s2\">\"message\"<\/span>: <span class=\"s2\">\"10.130.2.1 - - [13\/Jan\/2023:10:39:28 +0000] <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">GET \/ HTTP\/1.1<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\"> 304 0 <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">-<\/span><span class=\"se\">\\\"<\/span> <span class=\"se\">\\\"<\/span><span class=\"s2\">Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/108.0.0.0 Safari\/537.36<\/span><span class=\"se\">\\\"<\/span> <span class=\"se\">\\\"<\/span><span class=\"s2\">172.16.100.11<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">\"<\/span>\r\n  <span class=\"o\">}<\/span>,\r\n  <span class=\"s2\">\"line\"<\/span>: <span class=\"s2\">\"{<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">@timestamp<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">2023-01-13T10:39:28.108631523Z<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">file<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">\/var\/log\/pods\/test_nginx-sample-785f776647-zlw4c_aad4ae08-d47b-4a1c-b614-fbaccc375339\/nginx-sample\/0.log<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">hostname<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">worker-01<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">kubernetes<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:{<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">annotations<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:{<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">k8s.v1.cni.cncf.io\/network-status<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">[{<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">name<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">openshift-sdn<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">interface<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">eth0<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">ips<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: [<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n        <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">10.131.3.3<\/span><span class=\"se\">\\\\\\\"\\\\<\/span><span class=\"s2\">n    ],<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">default<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: true,<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">dns<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: {}<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n}]<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">k8s.v1.cni.cncf.io\/networks-status<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">[{<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">name<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">openshift-sdn<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">interface<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">eth0<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">ips<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: [<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n        <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">10.131.3.3<\/span><span class=\"se\">\\\\\\\"\\\\<\/span><span class=\"s2\">n    ],<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">default<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: true,<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n    <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">dns<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">: {}<\/span><span class=\"se\">\\\\<\/span><span class=\"s2\">n}]<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">openshift.io\/scc<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">restricted-v2<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">seccomp.security.alpha.kubernetes.io\/pod<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">runtime\/default<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">},<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">container_id<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">cri-o:\/\/9de13a3bd7dd97b9557dc8acf71790981591cda55972d32d3a8c1724178739ab<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">container_image<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">image-registry.openshift-image-registry.svc:5000\/test\/nginx-sample@sha256:9661529b8e8bb5307da4c35546ca9165d3fa38c7c36d627027b706c8e3ee5d52<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">container_name<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">nginx-sample<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">labels<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:{<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">app<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">nginx-sample<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">deployment<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">nginx-sample<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod-template-hash<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">785f776647<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">},<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">namespace_labels<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:{<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">kubernetes.io\/metadata.name<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">test<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod-security.kubernetes.io\/audit<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">baseline<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod-security.kubernetes.io\/audit-version<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">v1.24<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod-security.kubernetes.io\/warn<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">baseline<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod-security.kubernetes.io\/warn-version<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">v1.24<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">},<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">namespace_name<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">test<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod_id<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">aad4ae08-d47b-4a1c-b614-fbaccc375339<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod_ip<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">10.131.3.3<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod_name<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">nginx-sample-785f776647-zlw4c<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">pod_owner<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">ReplicaSet\/nginx-sample-785f776647<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">},<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">level<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">default<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">log_type<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">application<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">message<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">:<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">10.130.2.1 - - [13\/Jan\/2023:10:39:28 +0000] <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">GET \/ HTTP\/1.1<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\"> 304 0 <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">-<\/span><span class=\"se\">\\\\\\\"<\/span> <span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/108.0.0.0 Safari\/537.36<\/span><span class=\"se\">\\\\\\\"<\/span> <span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">172.16.100.11<\/span><span class=\"se\">\\\\\\\"\\\"<\/span><span class=\"s2\">}\"<\/span>,\r\n  <span class=\"s2\">\"timestamp\"<\/span>: <span class=\"s2\">\"2023-01-13T19:39:28.545469387+09:00\"<\/span>\r\n<span class=\"o\">}<\/span>\r\n<span class=\"o\">(<\/span>\u7565<span class=\"o\">)<\/span>\r\n<\/code><\/pre>\n<p>\u5982\u679c\u662f `&#8211;output=raw` \u7684\u60c5\u51b5<\/p>\n<p>\u6211\u8ba4\u4e3a\u82e5\u60f3\u901a\u8fc7\u4f7f\u7528jq\u7b49\u5de5\u5177\u6765\u6574\u7406\u5e76\u63d0\u53d6\u4fe1\u606f\uff0c\u53ef\u4ee5\u4f7f\u7528&#8211;output=raw\u9009\u9879\u6765\u4ee5json\u683c\u5f0f\u663e\u793alog line\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@bastion-01 ~]# logcli <span class=\"nt\">--addr<\/span><span class=\"o\">=<\/span>https:\/\/localhost:3100 <span class=\"nt\">--tls-skip-verify<\/span> <span class=\"nt\">--org-id<\/span><span class=\"o\">=<\/span>application query <span class=\"nt\">--quiet<\/span> <span class=\"nt\">--output<\/span><span class=\"o\">=<\/span>raw <span class=\"s1\">'{ log_type=~\".+\", kubernetes_namespace_name=\"test\" } | json'<\/span> | jq\r\n<span class=\"o\">{<\/span>\r\n  <span class=\"s2\">\"@timestamp\"<\/span>: <span class=\"s2\">\"2023-01-13T10:39:28.108631523Z\"<\/span>,\r\n  <span class=\"s2\">\"file\"<\/span>: <span class=\"s2\">\"\/var\/log\/pods\/test_nginx-sample-785f776647-zlw4c_aad4ae08-d47b-4a1c-b614-fbaccc375339\/nginx-sample\/0.log\"<\/span>,\r\n  <span class=\"s2\">\"hostname\"<\/span>: <span class=\"s2\">\"worker-01\"<\/span>,\r\n  <span class=\"s2\">\"kubernetes\"<\/span>: <span class=\"o\">{<\/span>\r\n    <span class=\"s2\">\"annotations\"<\/span>: <span class=\"o\">{<\/span>\r\n      <span class=\"s2\">\"k8s.v1.cni.cncf.io\/network-status\"<\/span>: <span class=\"s2\">\"[{<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">name<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">openshift-sdn<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">interface<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">eth0<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">ips<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: [<\/span><span class=\"se\">\\n<\/span>        <span class=\"se\">\\\"<\/span><span class=\"s2\">10.131.3.3<\/span><span class=\"se\">\\\"\\n<\/span><span class=\"s2\">    ],<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">default<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: true,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">dns<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: {}<\/span><span class=\"se\">\\n<\/span><span class=\"s2\">}]\"<\/span>,\r\n      <span class=\"s2\">\"k8s.v1.cni.cncf.io\/networks-status\"<\/span>: <span class=\"s2\">\"[{<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">name<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">openshift-sdn<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">interface<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">eth0<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">ips<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: [<\/span><span class=\"se\">\\n<\/span>        <span class=\"se\">\\\"<\/span><span class=\"s2\">10.131.3.3<\/span><span class=\"se\">\\\"\\n<\/span><span class=\"s2\">    ],<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">default<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: true,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">dns<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: {}<\/span><span class=\"se\">\\n<\/span><span class=\"s2\">}]\"<\/span>,\r\n      <span class=\"s2\">\"openshift.io\/scc\"<\/span>: <span class=\"s2\">\"restricted-v2\"<\/span>,\r\n      <span class=\"s2\">\"seccomp.security.alpha.kubernetes.io\/pod\"<\/span>: <span class=\"s2\">\"runtime\/default\"<\/span>\r\n    <span class=\"o\">}<\/span>,\r\n    <span class=\"s2\">\"container_id\"<\/span>: <span class=\"s2\">\"cri-o:\/\/9de13a3bd7dd97b9557dc8acf71790981591cda55972d32d3a8c1724178739ab\"<\/span>,\r\n    <span class=\"s2\">\"container_image\"<\/span>: <span class=\"s2\">\"image-registry.openshift-image-registry.svc:5000\/test\/nginx-sample@sha256:9661529b8e8bb5307da4c35546ca9165d3fa38c7c36d627027b706c8e3ee5d52\"<\/span>,\r\n    <span class=\"s2\">\"container_name\"<\/span>: <span class=\"s2\">\"nginx-sample\"<\/span>,\r\n    <span class=\"s2\">\"labels\"<\/span>: <span class=\"o\">{<\/span>\r\n      <span class=\"s2\">\"app\"<\/span>: <span class=\"s2\">\"nginx-sample\"<\/span>,\r\n      <span class=\"s2\">\"deployment\"<\/span>: <span class=\"s2\">\"nginx-sample\"<\/span>,\r\n      <span class=\"s2\">\"pod-template-hash\"<\/span>: <span class=\"s2\">\"785f776647\"<\/span>\r\n    <span class=\"o\">}<\/span>,\r\n    <span class=\"s2\">\"namespace_labels\"<\/span>: <span class=\"o\">{<\/span>\r\n      <span class=\"s2\">\"kubernetes.io\/metadata.name\"<\/span>: <span class=\"s2\">\"test\"<\/span>,\r\n      <span class=\"s2\">\"pod-security.kubernetes.io\/audit\"<\/span>: <span class=\"s2\">\"baseline\"<\/span>,\r\n      <span class=\"s2\">\"pod-security.kubernetes.io\/audit-version\"<\/span>: <span class=\"s2\">\"v1.24\"<\/span>,\r\n      <span class=\"s2\">\"pod-security.kubernetes.io\/warn\"<\/span>: <span class=\"s2\">\"baseline\"<\/span>,\r\n      <span class=\"s2\">\"pod-security.kubernetes.io\/warn-version\"<\/span>: <span class=\"s2\">\"v1.24\"<\/span>\r\n    <span class=\"o\">}<\/span>,\r\n    <span class=\"s2\">\"namespace_name\"<\/span>: <span class=\"s2\">\"test\"<\/span>,\r\n    <span class=\"s2\">\"pod_id\"<\/span>: <span class=\"s2\">\"aad4ae08-d47b-4a1c-b614-fbaccc375339\"<\/span>,\r\n    <span class=\"s2\">\"pod_ip\"<\/span>: <span class=\"s2\">\"10.131.3.3\"<\/span>,\r\n    <span class=\"s2\">\"pod_name\"<\/span>: <span class=\"s2\">\"nginx-sample-785f776647-zlw4c\"<\/span>,\r\n    <span class=\"s2\">\"pod_owner\"<\/span>: <span class=\"s2\">\"ReplicaSet\/nginx-sample-785f776647\"<\/span>\r\n  <span class=\"o\">}<\/span>,\r\n  <span class=\"s2\">\"level\"<\/span>: <span class=\"s2\">\"default\"<\/span>,\r\n  <span class=\"s2\">\"log_type\"<\/span>: <span class=\"s2\">\"application\"<\/span>,\r\n  <span class=\"s2\">\"message\"<\/span>: <span class=\"s2\">\"10.130.2.1 - - [13\/Jan\/2023:10:39:28 +0000] <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">GET \/ HTTP\/1.1<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\"> 304 0 <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">-<\/span><span class=\"se\">\\\"<\/span> <span class=\"se\">\\\"<\/span><span class=\"s2\">Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/108.0.0.0 Safari\/537.36<\/span><span class=\"se\">\\\"<\/span> <span class=\"se\">\\\"<\/span><span class=\"s2\">172.16.100.11<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">\"<\/span>\r\n<span class=\"o\">}<\/span>\r\n<span class=\"o\">(<\/span>\u7565<span class=\"o\">)<\/span>\r\n<\/code><\/pre>\n<p>\u5982\u679c\u80fd\u591f\u663e\u793a\u5230\u8fd9\u4e2a\u7a0b\u5ea6\uff0c\u5c31\u53ef\u4ee5\u4ece\u8fd9\u4e9b\u4fe1\u606f\u4e2d\u4f7f\u7528jq\u6765\u6574\u7406\u4fe1\u606f\uff0c\u5e76\u521b\u5efa\u4ec5\u63d0\u53d6\u6240\u9700\u4fe1\u606f\u7684\u65e5\u5fd7\u6587\u4ef6\u3002<br \/>\n\u4f8b\u5982\uff0c\u4f7f\u7528jq\uff0c\u5c06\u8f93\u51fa\u9650\u5b9a\u4e3a@timestanp\u3001.level\u3001.kubelnetes.namespace_name\u3001.kubernetes.pod_name\u548c.message\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@bastion-01 ~]# logcli <span class=\"nt\">--addr<\/span><span class=\"o\">=<\/span>https:\/\/localhost:3100 <span class=\"nt\">--tls-skip-verify<\/span> <span class=\"nt\">--org-id<\/span><span class=\"o\">=<\/span>application query <span class=\"nt\">--quiet<\/span> <span class=\"nt\">--output<\/span><span class=\"o\">=<\/span>raw <span class=\"s1\">'{ log_type=~\".+\", kubernetes_namespace_name=\"test\" } | json'<\/span> | jq <span class=\"nt\">-r<\/span> <span class=\"s1\">'. | {timestamp:.\"@timestamp\", level:.level, namespace:.kubernetes.namespace_name, pod:.kubernetes.pod_name, message:.message}'<\/span>\r\n<span class=\"o\">{<\/span>\r\n  <span class=\"s2\">\"timestamp\"<\/span>: <span class=\"s2\">\"2023-01-13T11:41:01.922488973Z\"<\/span>,\r\n  <span class=\"s2\">\"level\"<\/span>: <span class=\"s2\">\"default\"<\/span>,\r\n  <span class=\"s2\">\"namespace\"<\/span>: <span class=\"s2\">\"test\"<\/span>,\r\n  <span class=\"s2\">\"pod\"<\/span>: <span class=\"s2\">\"nginx-sample-785f776647-zlw4c\"<\/span>,\r\n  <span class=\"s2\">\"message\"<\/span>: <span class=\"s2\">\"10.130.2.1 - - [13\/Jan\/2023:11:41:01 +0000] <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">GET \/aaa HTTP\/1.1<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\"> 404 555 <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">-<\/span><span class=\"se\">\\\"<\/span> <span class=\"se\">\\\"<\/span><span class=\"s2\">Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/108.0.0.0 Safari\/537.36<\/span><span class=\"se\">\\\"<\/span> <span class=\"se\">\\\"<\/span><span class=\"s2\">172.16.100.11<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">\"<\/span>\r\n<span class=\"o\">}<\/span>\r\n<span class=\"o\">{<\/span>\r\n  <span class=\"s2\">\"timestamp\"<\/span>: <span class=\"s2\">\"2023-01-13T11:41:01.922427779Z\"<\/span>,\r\n  <span class=\"s2\">\"level\"<\/span>: <span class=\"s2\">\"default\"<\/span>,\r\n  <span class=\"s2\">\"namespace\"<\/span>: <span class=\"s2\">\"test\"<\/span>,\r\n  <span class=\"s2\">\"pod\"<\/span>: <span class=\"s2\">\"nginx-sample-785f776647-zlw4c\"<\/span>,\r\n  <span class=\"s2\">\"message\"<\/span>: <span class=\"s2\">\"2023\/01\/13 11:41:01 [error] 25#0: *3 open() <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">\/opt\/app-root\/src\/aaa<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\"> failed (2: No such file or directory), client: 10.130.2.1, server: _, request: <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">GET \/aaa HTTP\/1.1<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">, host: <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">nginx-sample-test.apps.cluster-01.example.local<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">\"<\/span>\r\n<span class=\"o\">}<\/span>\r\n<span class=\"o\">(<\/span>\u7565<span class=\"o\">)<\/span>\r\n<\/code><\/pre>\n<p>\u3042\u3068\u306f\u3044\u308d\u3044\u308d\u691c\u7d22\u6761\u4ef6\u3092\u3064\u3051\u3066\u5fc5\u8981\u306a\u30ed\u30b0\u306e\u307f\u62bd\u51fa\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<br \/>\nLogQL\u306e\u4f8b\u3068\u3057\u3066\u306f\u3001\u524d\u8ff0\u306eOCP\u30b3\u30f3\u30bd\u30fc\u30eb\u304b\u3089LogQL\u3092\u78ba\u8a8d\u3057\u3066\u307f\u308b\u3067\u78ba\u8a8d\u3057\u305f\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u691c\u7d22\u6761\u4ef6\u306a\u3069\u304c\u4f7f\u3048\u308b\u304b\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n<ul class=\"post-ul\">Namesapce\u3067test\u3001Severity\u3067warning\u3092\u9078\u629e\u3057\u3066\u307f\u305f\u5834\u5408\u306eLogQL<\/ul>\n<pre class=\"post-pre\"><code>{ log_type=~\".+\", kubernetes_namespace_name=\"test\" } | json | level=~\"warn|warning\"\r\n<\/code><\/pre>\n<p>test\u3068\u3044\u3046\u6587\u5b57\u5217\u691c\u7d22\u3092\u8ffd\u52a0<\/p>\n<pre class=\"post-pre\"><code>{ log_type=~\".+\", kubernetes_namespace_name=\"test\" } |= \"test\" | json | level=~\"warn|warning\"\r\n<\/code><\/pre>\n<ul class=\"post-ul\">Pod\u540d\u3082\u691c\u7d22\u306b\u8ffd\u52a0<\/ul>\n<pre class=\"post-pre\"><code>{ log_type=~\".+\", kubernetes_namespace_name=\"test\", kubernetes_pod_name=\"nginx-sample-785f776647-zlw4c\" } |= \"test\" | json | level=~\"warn|warning\"\r\n<\/code><\/pre>\n<h3>\u67e5\u8be2\u7684\u5b9e\u65bd\uff08\u57fa\u7840\u8bbe\u65bd\uff09<\/h3>\n<p>\u63a5\u4e0b\u6765\uff0c\u6211\u4eec\u6765\u67e5\u770b\u4e00\u4e0b\u57fa\u7840\u8bbe\u65bd\u7684\u65e5\u5fd7\u3002\uff08&#8211;org-id=\u57fa\u7840\u8bbe\u65bd\uff09<\/p>\n<pre class=\"post-pre\"><code>logcli <span class=\"nt\">--addr<\/span><span class=\"o\">=<\/span>https:\/\/localhost:3100 <span class=\"nt\">--tls-skip-verify<\/span> <span class=\"nt\">--org-id<\/span><span class=\"o\">=<\/span>infrastructure query <span class=\"nt\">--quiet<\/span> <span class=\"nt\">--output<\/span><span class=\"o\">=<\/span>raw <span class=\"s1\">'{ log_type=~\".+\" } | json'<\/span> | jq\r\n<\/code><\/pre>\n<p>(\u5de5\u4f5c\u793a\u4f8b)<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@bastion-01 ~]# logcli <span class=\"nt\">--addr<\/span><span class=\"o\">=<\/span>https:\/\/localhost:3100 <span class=\"nt\">--tls-skip-verify<\/span> <span class=\"nt\">--org-id<\/span><span class=\"o\">=<\/span>infrastructure query <span class=\"nt\">--quiet<\/span> <span class=\"nt\">--output<\/span><span class=\"o\">=<\/span>raw <span class=\"s1\">'{ log_type=~\".+\" } | json'<\/span> | jq\r\n<span class=\"o\">{<\/span>\r\n  <span class=\"s2\">\"@timestamp\"<\/span>: <span class=\"s2\">\"2023-01-13T12:00:03.234160362Z\"<\/span>,\r\n  <span class=\"s2\">\"file\"<\/span>: <span class=\"s2\">\"\/var\/log\/pods\/openshift-storage_rook-ceph-mds-ocs-storagecluster-cephfilesystem-b-5b6776b5xqfph_5a3dd1df-88ff-4ddb-8e0c-18eea0adb35a\/mds\/0.log\"<\/span>,\r\n  <span class=\"s2\">\"hostname\"<\/span>: <span class=\"s2\">\"storage-02\"<\/span>,\r\n  <span class=\"s2\">\"kubernetes\"<\/span>: <span class=\"o\">{<\/span>\r\n    <span class=\"s2\">\"annotations\"<\/span>: <span class=\"o\">{<\/span>\r\n      <span class=\"s2\">\"k8s.v1.cni.cncf.io\/network-status\"<\/span>: <span class=\"s2\">\"[{<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">name<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">openshift-sdn<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">interface<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">eth0<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">ips<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: [<\/span><span class=\"se\">\\n<\/span>        <span class=\"se\">\\\"<\/span><span class=\"s2\">10.129.4.19<\/span><span class=\"se\">\\\"\\n<\/span><span class=\"s2\">    ],<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">default<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: true,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">dns<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: {}<\/span><span class=\"se\">\\n<\/span><span class=\"s2\">}]\"<\/span>,\r\n      <span class=\"s2\">\"k8s.v1.cni.cncf.io\/networks-status\"<\/span>: <span class=\"s2\">\"[{<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">name<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">openshift-sdn<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">interface<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">eth0<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">ips<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: [<\/span><span class=\"se\">\\n<\/span>        <span class=\"se\">\\\"<\/span><span class=\"s2\">10.129.4.19<\/span><span class=\"se\">\\\"\\n<\/span><span class=\"s2\">    ],<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">default<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: true,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">dns<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: {}<\/span><span class=\"se\">\\n<\/span><span class=\"s2\">}]\"<\/span>,\r\n      <span class=\"s2\">\"openshift.io\/scc\"<\/span>: <span class=\"s2\">\"rook-ceph\"<\/span>\r\n    <span class=\"o\">}<\/span>,\r\n    <span class=\"s2\">\"container_id\"<\/span>: <span class=\"s2\">\"cri-o:\/\/20507a80792f05b11a7f0964e7a6a0eb5f2f765c61735abd513b74c2c628c3ef\"<\/span>,\r\n    <span class=\"s2\">\"container_image\"<\/span>: <span class=\"s2\">\"registry.redhat.io\/rhceph\/rhceph-5-rhel8@sha256:7892e9da0a70b2d7e3efd98d2cb980e485f07eddff6a0dac6d6bd6c516914f3c\"<\/span>,\r\n    <span class=\"s2\">\"container_name\"<\/span>: <span class=\"s2\">\"mds\"<\/span>,\r\n    <span class=\"s2\">\"labels\"<\/span>: <span class=\"o\">{<\/span>\r\n      <span class=\"s2\">\"app\"<\/span>: <span class=\"s2\">\"rook-ceph-mds\"<\/span>,\r\n      <span class=\"s2\">\"app.kubernetes.io\/component\"<\/span>: <span class=\"s2\">\"cephfilesystems.ceph.rook.io\"<\/span>,\r\n      <span class=\"s2\">\"app.kubernetes.io\/created-by\"<\/span>: <span class=\"s2\">\"rook-ceph-operator\"<\/span>,\r\n      <span class=\"s2\">\"app.kubernetes.io\/instance\"<\/span>: <span class=\"s2\">\"ocs-storagecluster-cephfilesystem-b\"<\/span>,\r\n      <span class=\"s2\">\"app.kubernetes.io\/managed-by\"<\/span>: <span class=\"s2\">\"rook-ceph-operator\"<\/span>,\r\n      <span class=\"s2\">\"app.kubernetes.io\/name\"<\/span>: <span class=\"s2\">\"ceph-mds\"<\/span>,\r\n      <span class=\"s2\">\"app.kubernetes.io\/part-of\"<\/span>: <span class=\"s2\">\"ocs-storagecluster-cephfilesystem\"<\/span>,\r\n      <span class=\"s2\">\"ceph_daemon_id\"<\/span>: <span class=\"s2\">\"ocs-storagecluster-cephfilesystem-b\"<\/span>,\r\n      <span class=\"s2\">\"ceph_daemon_type\"<\/span>: <span class=\"s2\">\"mds\"<\/span>,\r\n      <span class=\"s2\">\"mds\"<\/span>: <span class=\"s2\">\"ocs-storagecluster-cephfilesystem-b\"<\/span>,\r\n      <span class=\"s2\">\"pod-template-hash\"<\/span>: <span class=\"s2\">\"5b6776b569\"<\/span>,\r\n      <span class=\"s2\">\"rook.io\/operator-namespace\"<\/span>: <span class=\"s2\">\"openshift-storage\"<\/span>,\r\n      <span class=\"s2\">\"rook_cluster\"<\/span>: <span class=\"s2\">\"openshift-storage\"<\/span>,\r\n      <span class=\"s2\">\"rook_file_system\"<\/span>: <span class=\"s2\">\"ocs-storagecluster-cephfilesystem\"<\/span>\r\n    <span class=\"o\">}<\/span>,\r\n    <span class=\"s2\">\"namespace_labels\"<\/span>: <span class=\"o\">{<\/span>\r\n      <span class=\"s2\">\"kubernetes.io\/metadata.name\"<\/span>: <span class=\"s2\">\"openshift-storage\"<\/span>,\r\n      <span class=\"s2\">\"olm.operatorgroup.uid\/e244cb52-c6ab-4ec7-9564-0bfbea0f65cf\"<\/span>: <span class=\"s2\">\"\"<\/span>,\r\n      <span class=\"s2\">\"olm.operatorgroup.uid\/e8e1159e-eaeb-4d82-a5de-67d913cf00ca\"<\/span>: <span class=\"s2\">\"\"<\/span>,\r\n      <span class=\"s2\">\"openshift.io\/cluster-monitoring\"<\/span>: <span class=\"s2\">\"true\"<\/span>\r\n    <span class=\"o\">}<\/span>,\r\n    <span class=\"s2\">\"namespace_name\"<\/span>: <span class=\"s2\">\"openshift-storage\"<\/span>,\r\n    <span class=\"s2\">\"pod_id\"<\/span>: <span class=\"s2\">\"5a3dd1df-88ff-4ddb-8e0c-18eea0adb35a\"<\/span>,\r\n    <span class=\"s2\">\"pod_ip\"<\/span>: <span class=\"s2\">\"10.129.4.19\"<\/span>,\r\n    <span class=\"s2\">\"pod_name\"<\/span>: <span class=\"s2\">\"rook-ceph-mds-ocs-storagecluster-cephfilesystem-b-5b6776b5xqfph\"<\/span>,\r\n    <span class=\"s2\">\"pod_owner\"<\/span>: <span class=\"s2\">\"ReplicaSet\/rook-ceph-mds-ocs-storagecluster-cephfilesystem-b-5b6776b569\"<\/span>\r\n  <span class=\"o\">}<\/span>,\r\n  <span class=\"s2\">\"level\"<\/span>: <span class=\"s2\">\"default\"<\/span>,\r\n  <span class=\"s2\">\"log_type\"<\/span>: <span class=\"s2\">\"infrastructure\"<\/span>,\r\n  <span class=\"s2\">\"message\"<\/span>: <span class=\"s2\">\"debug 2023-01-13T12:00:03.233+0000 7f489696c700  1 mds.ocs-storagecluster-cephfilesystem-b asok_command: status {prefix=status} (starting...)\"<\/span>\r\n<span class=\"o\">}<\/span>\r\n<span class=\"o\">(<\/span>\u7565<span class=\"o\">)<\/span>\r\n<\/code><\/pre>\n<p>\u3042\u3068\u306f\u4e0a\u8ff0\u3067\u8868\u793a\u3055\u308c\u305flabel\u3092\u53c2\u8003\u306b\u3001\u691c\u7d22\u6761\u4ef6\u3092\u3044\u308d\u3044\u308d\u5909\u3048\u308b\u3068\u5fc5\u8981\u306a\u60c5\u5831\u304c\u53d6\u5f97\u3067\u304d\u307e\u3059\u3002<\/p>\n<p>\u53ea\u63d0\u53d6storage-02\u8282\u70b9\u7684\u65e5\u5fd7<\/p>\n<pre class=\"post-pre\"><code>{ log_type=~\".+\" } | json | hostname=~\"storage-02\"\r\n<\/code><\/pre>\n<p>\uff08\u5de5\u4f5c\u4e3e\u4f8b\uff09<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@bastion-01 ~]# logcli <span class=\"nt\">--addr<\/span><span class=\"o\">=<\/span>https:\/\/localhost:3100 <span class=\"nt\">--tls-skip-verify<\/span> <span class=\"nt\">--org-id<\/span><span class=\"o\">=<\/span>infrastructure query <span class=\"nt\">--quiet<\/span> <span class=\"nt\">--output<\/span><span class=\"o\">=<\/span>raw <span class=\"s1\">'{ log_type=~\".+\" } | json | hostname=~\"storage-02\"'<\/span> | jq\r\n<span class=\"o\">{<\/span>\r\n  <span class=\"s2\">\"@timestamp\"<\/span>: <span class=\"s2\">\"2023-01-13T12:09:26.854047175Z\"<\/span>,\r\n  <span class=\"s2\">\"file\"<\/span>: <span class=\"s2\">\"\/var\/log\/pods\/openshift-storage_rook-ceph-mon-c-74d5c57cc-hhm7z_d4b6827d-4cbb-4c35-a97a-247b3cbae889\/mon\/0.log\"<\/span>,\r\n  <span class=\"s2\">\"hostname\"<\/span>: <span class=\"s2\">\"storage-02\"<\/span>,\r\n  <span class=\"s2\">\"kubernetes\"<\/span>: <span class=\"o\">{<\/span>\r\n    <span class=\"s2\">\"annotations\"<\/span>: <span class=\"o\">{<\/span>\r\n      <span class=\"s2\">\"k8s.v1.cni.cncf.io\/network-status\"<\/span>: <span class=\"s2\">\"[{<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">name<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">openshift-sdn<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">interface<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">eth0<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">ips<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: [<\/span><span class=\"se\">\\n<\/span>        <span class=\"se\">\\\"<\/span><span class=\"s2\">10.129.4.14<\/span><span class=\"se\">\\\"\\n<\/span><span class=\"s2\">    ],<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">default<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: true,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">dns<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: {}<\/span><span class=\"se\">\\n<\/span><span class=\"s2\">}]\"<\/span>,\r\n      <span class=\"s2\">\"k8s.v1.cni.cncf.io\/networks-status\"<\/span>: <span class=\"s2\">\"[{<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">name<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">openshift-sdn<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">interface<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">eth0<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">ips<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: [<\/span><span class=\"se\">\\n<\/span>        <span class=\"se\">\\\"<\/span><span class=\"s2\">10.129.4.14<\/span><span class=\"se\">\\\"\\n<\/span><span class=\"s2\">    ],<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">default<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: true,<\/span><span class=\"se\">\\n<\/span>    <span class=\"se\">\\\"<\/span><span class=\"s2\">dns<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">: {}<\/span><span class=\"se\">\\n<\/span><span class=\"s2\">}]\"<\/span>,\r\n      <span class=\"s2\">\"openshift.io\/scc\"<\/span>: <span class=\"s2\">\"rook-ceph\"<\/span>\r\n    <span class=\"o\">}<\/span>,\r\n    <span class=\"s2\">\"container_id\"<\/span>: <span class=\"s2\">\"cri-o:\/\/250e94cc56e7cba725c5d2f567ce14002eada787e497cf2c517c759456fe2abd\"<\/span>,\r\n    <span class=\"s2\">\"container_image\"<\/span>: <span class=\"s2\">\"registry.redhat.io\/rhceph\/rhceph-5-rhel8@sha256:7892e9da0a70b2d7e3efd98d2cb980e485f07eddff6a0dac6d6bd6c516914f3c\"<\/span>,\r\n    <span class=\"s2\">\"container_name\"<\/span>: <span class=\"s2\">\"mon\"<\/span>,\r\n    <span class=\"s2\">\"labels\"<\/span>: <span class=\"o\">{<\/span>\r\n      <span class=\"s2\">\"app\"<\/span>: <span class=\"s2\">\"rook-ceph-mon\"<\/span>,\r\n      <span class=\"s2\">\"app.kubernetes.io\/component\"<\/span>: <span class=\"s2\">\"cephclusters.ceph.rook.io\"<\/span>,\r\n      <span class=\"s2\">\"app.kubernetes.io\/created-by\"<\/span>: <span class=\"s2\">\"rook-ceph-operator\"<\/span>,\r\n      <span class=\"s2\">\"app.kubernetes.io\/instance\"<\/span>: <span class=\"s2\">\"c\"<\/span>,\r\n      <span class=\"s2\">\"app.kubernetes.io\/managed-by\"<\/span>: <span class=\"s2\">\"rook-ceph-operator\"<\/span>,\r\n      <span class=\"s2\">\"app.kubernetes.io\/name\"<\/span>: <span class=\"s2\">\"ceph-mon\"<\/span>,\r\n      <span class=\"s2\">\"app.kubernetes.io\/part-of\"<\/span>: <span class=\"s2\">\"ocs-storagecluster-cephcluster\"<\/span>,\r\n      <span class=\"s2\">\"ceph_daemon_id\"<\/span>: <span class=\"s2\">\"c\"<\/span>,\r\n      <span class=\"s2\">\"ceph_daemon_type\"<\/span>: <span class=\"s2\">\"mon\"<\/span>,\r\n      <span class=\"s2\">\"mon\"<\/span>: <span class=\"s2\">\"c\"<\/span>,\r\n      <span class=\"s2\">\"mon_cluster\"<\/span>: <span class=\"s2\">\"openshift-storage\"<\/span>,\r\n      <span class=\"s2\">\"pod-template-hash\"<\/span>: <span class=\"s2\">\"74d5c57cc\"<\/span>,\r\n      <span class=\"s2\">\"rook.io\/operator-namespace\"<\/span>: <span class=\"s2\">\"openshift-storage\"<\/span>,\r\n      <span class=\"s2\">\"rook_cluster\"<\/span>: <span class=\"s2\">\"openshift-storage\"<\/span>\r\n    <span class=\"o\">}<\/span>,\r\n    <span class=\"s2\">\"namespace_labels\"<\/span>: <span class=\"o\">{<\/span>\r\n      <span class=\"s2\">\"kubernetes.io\/metadata.name\"<\/span>: <span class=\"s2\">\"openshift-storage\"<\/span>,\r\n      <span class=\"s2\">\"olm.operatorgroup.uid\/e244cb52-c6ab-4ec7-9564-0bfbea0f65cf\"<\/span>: <span class=\"s2\">\"\"<\/span>,\r\n      <span class=\"s2\">\"olm.operatorgroup.uid\/e8e1159e-eaeb-4d82-a5de-67d913cf00ca\"<\/span>: <span class=\"s2\">\"\"<\/span>,\r\n      <span class=\"s2\">\"openshift.io\/cluster-monitoring\"<\/span>: <span class=\"s2\">\"true\"<\/span>\r\n    <span class=\"o\">}<\/span>,\r\n    <span class=\"s2\">\"namespace_name\"<\/span>: <span class=\"s2\">\"openshift-storage\"<\/span>,\r\n    <span class=\"s2\">\"pod_id\"<\/span>: <span class=\"s2\">\"d4b6827d-4cbb-4c35-a97a-247b3cbae889\"<\/span>,\r\n    <span class=\"s2\">\"pod_ip\"<\/span>: <span class=\"s2\">\"10.129.4.14\"<\/span>,\r\n    <span class=\"s2\">\"pod_name\"<\/span>: <span class=\"s2\">\"rook-ceph-mon-c-74d5c57cc-hhm7z\"<\/span>,\r\n    <span class=\"s2\">\"pod_owner\"<\/span>: <span class=\"s2\">\"ReplicaSet\/rook-ceph-mon-c-74d5c57cc\"<\/span>\r\n  <span class=\"o\">}<\/span>,\r\n  <span class=\"s2\">\"level\"<\/span>: <span class=\"s2\">\"default\"<\/span>,\r\n  <span class=\"s2\">\"log_type\"<\/span>: <span class=\"s2\">\"infrastructure\"<\/span>,\r\n  <span class=\"s2\">\"message\"<\/span>: <span class=\"s2\">\"debug 2023-01-13T12:09:26.852+0000 7f92ea711700  1 mon.c@2(peon).osd e43 _set_new_cache_sizes cache_size:1020054731 inc_alloc: 71303168 full_alloc: 71303168 kv_alloc: 876609536\"<\/span>\r\n<span class=\"o\">}<\/span>\r\n<span class=\"o\">(<\/span>\u7565<span class=\"o\">)<\/span>\r\n<\/code><\/pre>\n<p>\u4ec5\u63d0\u53d6 storage-02 \u7684\u8282\u70b9\u4e0a\u4e25\u91cd\u7ea7\u522b\u4e3a\u9519\u8bef\u7684\u65e5\u5fd7\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">{<\/span> <span class=\"nv\">log_type<\/span><span class=\"o\">=<\/span>~<span class=\"s2\">\".+\"<\/span> <span class=\"o\">}<\/span> | json | <span class=\"nb\">hostname<\/span><span class=\"o\">=<\/span>~<span class=\"s2\">\"storage-02\"<\/span> | <span class=\"nv\">level<\/span><span class=\"o\">=<\/span>~<span class=\"s2\">\"error|err|eror\"<\/span>\r\n<\/code><\/pre>\n<p>(\u51fa\u529b\u4f8b)<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@bastion-01 ~]# logcli <span class=\"nt\">--addr<\/span><span class=\"o\">=<\/span>https:\/\/localhost:3100 <span class=\"nt\">--tls-skip-verify<\/span> <span class=\"nt\">--org-id<\/span><span class=\"o\">=<\/span>infrastructure query <span class=\"nt\">--quiet<\/span> <span class=\"nt\">--output<\/span><span class=\"o\">=<\/span>raw <span class=\"s1\">'{ log_type=~\".+\" } | json | hostname=~\"storage-02\" | level=~\"error|err|eror\"'<\/span> | jq\r\n<span class=\"o\">{<\/span>\r\n  <span class=\"s2\">\"@timestamp\"<\/span>: <span class=\"s2\">\"2023-01-13T12:12:02.778068Z\"<\/span>,\r\n  <span class=\"s2\">\"_STREAM_ID\"<\/span>: <span class=\"s2\">\"bc5416e6fce64ff28a8bd0f2d22e8ea0\"<\/span>,\r\n  <span class=\"s2\">\"_SYSTEMD_INVOCATION_ID\"<\/span>: <span class=\"s2\">\"50a2f380a5424983985d6300858ab8f5\"<\/span>,\r\n  <span class=\"s2\">\"hostname\"<\/span>: <span class=\"s2\">\"storage-02\"<\/span>,\r\n  <span class=\"s2\">\"level\"<\/span>: <span class=\"s2\">\"error\"<\/span>,\r\n  <span class=\"s2\">\"log_type\"<\/span>: <span class=\"s2\">\"infrastructure\"<\/span>,\r\n  <span class=\"s2\">\"message\"<\/span>: <span class=\"s2\">\"E0113 12:12:02.778001    2173 kubelet_volumes.go:245] <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">There were many similar errors. Turn up verbosity to see them.<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\"> err=<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">orphaned pod <\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\">0188e4ae-e69f-4c91-9191-08d30cbe0772<\/span><span class=\"se\">\\\\\\\"<\/span><span class=\"s2\"> found, but error occurred when trying to remove the volumes dir: not a directory<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\"> numErrs=9\"<\/span>,\r\n  <span class=\"s2\">\"systemd\"<\/span>: <span class=\"o\">{<\/span>\r\n    <span class=\"s2\">\"t\"<\/span>: <span class=\"o\">{<\/span>\r\n      <span class=\"s2\">\"BOOT_ID\"<\/span>: <span class=\"s2\">\"8ea492c70e124859bd46a3a8b50b1cbd\"<\/span>,\r\n      <span class=\"s2\">\"CAP_EFFECTIVE\"<\/span>: <span class=\"s2\">\"1ffffffffff\"<\/span>,\r\n      <span class=\"s2\">\"CMDLINE\"<\/span>: <span class=\"s2\">\"kubelet --config=\/etc\/kubernetes\/kubelet.conf --bootstrap-kubeconfig=\/etc\/kubernetes\/kubeconfig --kubeconfig=\/var\/lib\/kubelet\/kubeconfig --container-runtime=remote --container-runtime-endpoint=\/var\/run\/crio\/crio.sock --runtime-cgroups=\/system.slice\/crio.service --node-labels=node-role.kubernetes.io\/worker,node.openshift.io\/os_id=rhcos --node-ip=172.16.100.21 --minimum-container-ttl-duration=6m0s --volume-plugin-dir=\/etc\/kubernetes\/kubelet-plugins\/volume\/exec --cloud-provider= --hostname-override= --provider-id= --pod-infra-container-image=quay.io\/openshift-release-dev\/ocp-v4.0-art-dev@sha256:d66ecf52d7cded5bc62f7bfab10149fff2ce22068b00f4594a7620959feb9cb0 --system-reserved=cpu=500m,memory=1Gi --v=2\"<\/span>,\r\n      <span class=\"s2\">\"COMM\"<\/span>: <span class=\"s2\">\"kubelet\"<\/span>,\r\n      <span class=\"s2\">\"EXE\"<\/span>: <span class=\"s2\">\"\/usr\/bin\/kubelet\"<\/span>,\r\n      <span class=\"s2\">\"GID\"<\/span>: <span class=\"s2\">\"0\"<\/span>,\r\n      <span class=\"s2\">\"MACHINE_ID\"<\/span>: <span class=\"s2\">\"78a0b435b82644ea86abebbb00b4299c\"<\/span>,\r\n      <span class=\"s2\">\"PID\"<\/span>: <span class=\"s2\">\"2173\"<\/span>,\r\n      <span class=\"s2\">\"SELINUX_CONTEXT\"<\/span>: <span class=\"s2\">\"system_u:system_r:kubelet_t:s0-s0:c0.c1023\"<\/span>,\r\n      <span class=\"s2\">\"STREAM_ID\"<\/span>: <span class=\"s2\">\"bc5416e6fce64ff28a8bd0f2d22e8ea0\"<\/span>,\r\n      <span class=\"s2\">\"SYSTEMD_CGROUP\"<\/span>: <span class=\"s2\">\"\/system.slice\/kubelet.service\"<\/span>,\r\n      <span class=\"s2\">\"SYSTEMD_INVOCATION_ID\"<\/span>: <span class=\"s2\">\"50a2f380a5424983985d6300858ab8f5\"<\/span>,\r\n      <span class=\"s2\">\"SYSTEMD_SLICE\"<\/span>: <span class=\"s2\">\"system.slice\"<\/span>,\r\n      <span class=\"s2\">\"SYSTEMD_UNIT\"<\/span>: <span class=\"s2\">\"kubelet.service\"<\/span>,\r\n      <span class=\"s2\">\"TRANSPORT\"<\/span>: <span class=\"s2\">\"stdout\"<\/span>,\r\n      <span class=\"s2\">\"UID\"<\/span>: <span class=\"s2\">\"0\"<\/span>\r\n    <span class=\"o\">}<\/span>,\r\n    <span class=\"s2\">\"u\"<\/span>: <span class=\"o\">{<\/span>\r\n      <span class=\"s2\">\"SYSLOG_FACILITY\"<\/span>: <span class=\"s2\">\"3\"<\/span>,\r\n      <span class=\"s2\">\"SYSLOG_IDENTIFIER\"<\/span>: <span class=\"s2\">\"hyperkube\"<\/span>\r\n    <span class=\"o\">}<\/span>\r\n  <span class=\"o\">}<\/span>,\r\n  <span class=\"s2\">\"tag\"<\/span>: <span class=\"s2\">\".journal.system\"<\/span>,\r\n  <span class=\"s2\">\"time\"<\/span>: <span class=\"s2\">\"2023-01-13T12:12:02+00:00\"<\/span>\r\n<span class=\"o\">}<\/span>\r\n<span class=\"o\">(<\/span>\u7565<span class=\"o\">)<\/span>\r\n<\/code><\/pre>\n<h3>\u5176\u4ed6\u9009\u9879<\/h3>\n<p>\u7136\u540e\uff0c\u4f3c\u4e4e\u8fd8\u53ef\u4ee5\u63d0\u53d6\u4efb\u610f\u8303\u56f4\u7684\u65e5\u5fd7\u7b49\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@bastion-01 ~]# logcli query <span class=\"nt\">--help<\/span>\r\nusage: logcli query <span class=\"o\">[<\/span>&lt;flags&gt;] &lt;query&gt;\r\n\r\n<span class=\"o\">(<\/span>\u7565<span class=\"o\">)<\/span>\r\n\r\nExample:\r\n\r\n  logcli query\r\n     <span class=\"nt\">--timezone<\/span><span class=\"o\">=<\/span>UTC\r\n     <span class=\"nt\">--from<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"2021-01-19T10:00:00Z\"<\/span>\r\n     <span class=\"nt\">--to<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"2021-01-19T20:00:00Z\"<\/span>\r\n     <span class=\"nt\">--output<\/span><span class=\"o\">=<\/span>jsonl\r\n     <span class=\"s1\">'my-query'<\/span>\r\n<span class=\"o\">(<\/span>\u7565<span class=\"o\">)<\/span>\r\n<\/code><\/pre>\n<h3>(\u6dfb\u52a0) logcli query\u7684&#8211;tail\u9009\u9879<\/h3>\n<p>\u5982\u679c\u5728logcli query\u4e2d\u6307\u5b9a&#8211;tail\u9009\u9879\uff0c\u60a8\u53ef\u4ee5\u5728CLI\u4e2d\u5b9e\u65f6\u67e5\u770b\u65e5\u5fd7\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">[<\/span>root@bastion-01 ~]# logcli <span class=\"nt\">--addr<\/span><span class=\"o\">=<\/span>https:\/\/localhost:3100 <span class=\"nt\">--tls-skip-verify<\/span> <span class=\"nt\">--org-id<\/span><span class=\"o\">=<\/span>application query <span class=\"nt\">--quiet<\/span> <span class=\"nt\">--output<\/span><span class=\"o\">=<\/span>raw <span class=\"nt\">--tail<\/span> <span class=\"s1\">'{ log_type=~\".+\", kubernetes_namespace_name=\"test\" } | json'<\/span> | jq <span class=\"nt\">-r<\/span> <span class=\"s1\">'. | {timestamp:.\"@timestamp\", level:.level, namespace:.kubernetes.namespace_name, pod:.kubernetes.pod_name, message:.message}'<\/span>\r\n<span class=\"o\">{<\/span>\r\n  <span class=\"s2\">\"timestamp\"<\/span>: <span class=\"s2\">\"2023-01-13T11:40:56.713334590Z\"<\/span>,\r\n  <span class=\"s2\">\"level\"<\/span>: <span class=\"s2\">\"default\"<\/span>,\r\n  <span class=\"s2\">\"namespace\"<\/span>: <span class=\"s2\">\"test\"<\/span>,\r\n  <span class=\"s2\">\"pod\"<\/span>: <span class=\"s2\">\"nginx-sample-785f776647-zlw4c\"<\/span>,\r\n  <span class=\"s2\">\"message\"<\/span>: <span class=\"s2\">\"10.130.2.1 - - [13\/Jan\/2023:11:40:56 +0000] <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">GET \/ HTTP\/1.1<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\"> 304 0 <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">-<\/span><span class=\"se\">\\\"<\/span> <span class=\"se\">\\\"<\/span><span class=\"s2\">Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/108.0.0.0 Safari\/537.36<\/span><span class=\"se\">\\\"<\/span> <span class=\"se\">\\\"<\/span><span class=\"s2\">172.16.100.11<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">\"<\/span>\r\n<span class=\"o\">}<\/span>\r\n<span class=\"o\">{<\/span>\r\n  <span class=\"s2\">\"timestamp\"<\/span>: <span class=\"s2\">\"2023-01-13T11:40:57.644921904Z\"<\/span>,\r\n  <span class=\"s2\">\"level\"<\/span>: <span class=\"s2\">\"default\"<\/span>,\r\n  <span class=\"s2\">\"namespace\"<\/span>: <span class=\"s2\">\"test\"<\/span>,\r\n  <span class=\"s2\">\"pod\"<\/span>: <span class=\"s2\">\"nginx-sample-785f776647-zlw4c\"<\/span>,\r\n  <span class=\"s2\">\"message\"<\/span>: <span class=\"s2\">\"10.130.2.1 - - [13\/Jan\/2023:11:40:57 +0000] <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">GET \/ HTTP\/1.1<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\"> 304 0 <\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">-<\/span><span class=\"se\">\\\"<\/span> <span class=\"se\">\\\"<\/span><span class=\"s2\">Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/108.0.0.0 Safari\/537.36<\/span><span class=\"se\">\\\"<\/span> <span class=\"se\">\\\"<\/span><span class=\"s2\">172.16.100.11<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\">\"<\/span>\r\n<span class=\"o\">}<\/span>\r\n<span class=\"c\"># \u30ea\u30a2\u30eb\u30bf\u30a4\u30e0\u3067\u30ed\u30b0\u304c\u8868\u793a<\/span>\r\n<\/code><\/pre>\n<h1>\u5c31\u4e2a\u4eba\u7684\u611f\u89c9\u800c\u8a00<\/h1>\n<p>\u6211\u5df2\u7ecf\u4f7f\u7528LogCLI\u4eceCLI\u4e2d\u6210\u529f\u5730\u8f93\u51fa\u4e86Loki\u7684\u65e5\u5fd7\u3002<\/p>\n<p>\u8fd9\u6b21\u6211\u901a\u8fc7logging-lokistack-query-frontend-http\u7684\u670d\u52a1\u8fdb\u884c\u4e86\u7aef\u53e3\u8f6c\u53d1\uff0c\u7136\u540e\u901a\u8fc7query-frontend\u6765\u641c\u7d22\u65e5\u5fd7\u3002<\/p>\n<p>\u7136\u800c\uff0c\u5982\u679c\u60f3\u8981\u521b\u5efa\u4e00\u4e2a\u811a\u672c\u6765\u4eceLoki\u4e2d\u63d0\u53d6\u65e5\u5fd7\uff0c\u5c31\u9700\u8981\u7814\u7a76\u4e00\u4e0blogcli\u7684&#8211;proxy\u9009\u9879\u6216\u8005nodeport\u7684Service\u7b49\u66f4\u597d\u7684\u8fde\u63a5\u65b9\u5f0f\u3002<\/p>\n<p>\u4e0b\u6b21\u6211\u5c1d\u8bd5\u4f7f\u7528 Cluster Logging 5.5 \uff0c\u4f46\u7531\u4e8e\u6587\u6863\u4e0a\u8fd8\u7f3a\u4e4f\u8bb8\u591a\u4fe1\u606f\uff0c\u6240\u4ee5\u5982\u679c Cluster Logging 5.6 \u53d1\u5e03\uff0c\u6211\u4f1a\u518d\u8bd5\u4e00\u6b21\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u603b\u89c8 LogCLI\u662fGrafana Loki\u7684\u547d\u4ee4\u884c\u754c\u9762\u3002 \u901a\u8fc7\u4f7f\u7528LogCLI\uff0c\u60a8\u53ef\u4ee5\u6267\u884c\u9488\u5bf9Loki\u5b9e\u4f8b\u7684 [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-35581","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.5 (Yoast SEO v21.5) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u6211\u5c1d\u8bd5\u4f7f\u7528LogCLI\u5728OpenShift 4.11 + LokiStack 5.5\u4e0a\u641c\u7d22Loki\u7684\u65e5\u5fd7 - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u6211\u5c1d\u8bd5\u4f7f\u7528logcli\u5728openshift-4-11-lokistack-5-5\u4e0a\u641c\u7d22loki\u7684\u65e5\u5fd7\u3002\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u6211\u5c1d\u8bd5\u4f7f\u7528LogCLI\u5728OpenShift 4.11 + LokiStack 5.5\u4e0a\u641c\u7d22Loki\u7684\u65e5\u5fd7\" \/>\n<meta property=\"og:description\" content=\"\u603b\u89c8 LogCLI\u662fGrafana Loki\u7684\u547d\u4ee4\u884c\u754c\u9762\u3002 \u901a\u8fc7\u4f7f\u7528LogCLI\uff0c\u60a8\u53ef\u4ee5\u6267\u884c\u9488\u5bf9Loki\u5b9e\u4f8b\u7684 [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u6211\u5c1d\u8bd5\u4f7f\u7528logcli\u5728openshift-4-11-lokistack-5-5\u4e0a\u641c\u7d22loki\u7684\u65e5\u5fd7\u3002\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-10-09T21:01:54+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-04T04:19:54+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d243737434c4406c2dd39\/28-0.png\" \/>\n<meta name=\"author\" content=\"\u79d1, \u96c5\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u79d1, \u96c5\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"19 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8logcli%e5%9c%a8openshift-4-11-lokistack-5-5%e4%b8%8a%e6%90%9c%e7%b4%a2loki%e7%9a%84%e6%97%a5%e5%bf%97%e3%80%82\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8logcli%e5%9c%a8openshift-4-11-lokistack-5-5%e4%b8%8a%e6%90%9c%e7%b4%a2loki%e7%9a%84%e6%97%a5%e5%bf%97%e3%80%82\/\",\"name\":\"\u6211\u5c1d\u8bd5\u4f7f\u7528LogCLI\u5728OpenShift 4.11 + LokiStack 5.5\u4e0a\u641c\u7d22Loki\u7684\u65e5\u5fd7 - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2023-10-09T21:01:54+00:00\",\"dateModified\":\"2024-05-04T04:19:54+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8logcli%e5%9c%a8openshift-4-11-lokistack-5-5%e4%b8%8a%e6%90%9c%e7%b4%a2loki%e7%9a%84%e6%97%a5%e5%bf%97%e3%80%82\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8logcli%e5%9c%a8openshift-4-11-lokistack-5-5%e4%b8%8a%e6%90%9c%e7%b4%a2loki%e7%9a%84%e6%97%a5%e5%bf%97%e3%80%82\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8logcli%e5%9c%a8openshift-4-11-lokistack-5-5%e4%b8%8a%e6%90%9c%e7%b4%a2loki%e7%9a%84%e6%97%a5%e5%bf%97%e3%80%82\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u6211\u5c1d\u8bd5\u4f7f\u7528LogCLI\u5728OpenShift 4.11 + LokiStack 5.5\u4e0a\u641c\u7d22Loki\u7684\u65e5\u5fd7\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a\",\"name\":\"\u79d1, \u96c5\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g\",\"caption\":\"\u79d1, \u96c5\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/keya\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8logcli%e5%9c%a8openshift-4-11-lokistack-5-5%e4%b8%8a%e6%90%9c%e7%b4%a2loki%e7%9a%84%e6%97%a5%e5%bf%97%e3%80%82\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u6211\u5c1d\u8bd5\u4f7f\u7528LogCLI\u5728OpenShift 4.11 + LokiStack 5.5\u4e0a\u641c\u7d22Loki\u7684\u65e5\u5fd7 - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u6211\u5c1d\u8bd5\u4f7f\u7528logcli\u5728openshift-4-11-lokistack-5-5\u4e0a\u641c\u7d22loki\u7684\u65e5\u5fd7\u3002\/","og_locale":"zh_CN","og_type":"article","og_title":"\u6211\u5c1d\u8bd5\u4f7f\u7528LogCLI\u5728OpenShift 4.11 + LokiStack 5.5\u4e0a\u641c\u7d22Loki\u7684\u65e5\u5fd7","og_description":"\u603b\u89c8 LogCLI\u662fGrafana Loki\u7684\u547d\u4ee4\u884c\u754c\u9762\u3002 \u901a\u8fc7\u4f7f\u7528LogCLI\uff0c\u60a8\u53ef\u4ee5\u6267\u884c\u9488\u5bf9Loki\u5b9e\u4f8b\u7684 [&hellip;]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u6211\u5c1d\u8bd5\u4f7f\u7528logcli\u5728openshift-4-11-lokistack-5-5\u4e0a\u641c\u7d22loki\u7684\u65e5\u5fd7\u3002\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2023-10-09T21:01:54+00:00","article_modified_time":"2024-05-04T04:19:54+00:00","og_image":[{"url":"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d243737434c4406c2dd39\/28-0.png"}],"author":"\u79d1, \u96c5","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u79d1, \u96c5","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"19 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8logcli%e5%9c%a8openshift-4-11-lokistack-5-5%e4%b8%8a%e6%90%9c%e7%b4%a2loki%e7%9a%84%e6%97%a5%e5%bf%97%e3%80%82\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8logcli%e5%9c%a8openshift-4-11-lokistack-5-5%e4%b8%8a%e6%90%9c%e7%b4%a2loki%e7%9a%84%e6%97%a5%e5%bf%97%e3%80%82\/","name":"\u6211\u5c1d\u8bd5\u4f7f\u7528LogCLI\u5728OpenShift 4.11 + LokiStack 5.5\u4e0a\u641c\u7d22Loki\u7684\u65e5\u5fd7 - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2023-10-09T21:01:54+00:00","dateModified":"2024-05-04T04:19:54+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8logcli%e5%9c%a8openshift-4-11-lokistack-5-5%e4%b8%8a%e6%90%9c%e7%b4%a2loki%e7%9a%84%e6%97%a5%e5%bf%97%e3%80%82\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8logcli%e5%9c%a8openshift-4-11-lokistack-5-5%e4%b8%8a%e6%90%9c%e7%b4%a2loki%e7%9a%84%e6%97%a5%e5%bf%97%e3%80%82\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8logcli%e5%9c%a8openshift-4-11-lokistack-5-5%e4%b8%8a%e6%90%9c%e7%b4%a2loki%e7%9a%84%e6%97%a5%e5%bf%97%e3%80%82\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u6211\u5c1d\u8bd5\u4f7f\u7528LogCLI\u5728OpenShift 4.11 + LokiStack 5.5\u4e0a\u641c\u7d22Loki\u7684\u65e5\u5fd7"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a","name":"\u79d1, \u96c5","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g","caption":"\u79d1, \u96c5"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/keya\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e5%b0%9d%e8%af%95%e4%bd%bf%e7%94%a8logcli%e5%9c%a8openshift-4-11-lokistack-5-5%e4%b8%8a%e6%90%9c%e7%b4%a2loki%e7%9a%84%e6%97%a5%e5%bf%97%e3%80%82\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/35581","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=35581"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/35581\/revisions"}],"predecessor-version":[{"id":98280,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/35581\/revisions\/98280"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=35581"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=35581"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=35581"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}