Istio组件日志设置

2024-01-02 23:10:34

1.istio-pilot日志级别

编辑istio-system.deployment.istio-pilot，修改args中--log_output_level=default:指定日志级别

2.istio-policy日志级别设置同istio-pilot

3.istio-proxy（envoy）日志级别设置

进入istio-proxy容器中，通过如下命令进行设置：

curl -X POST localhost:15000/logging?level=trace

4.istio-proxy access日志设置

官方参考：https://istio.io/docs/tasks/telemetry/logs/access-log/

修改istio-system.configMap.istio中的accessLogFile: "/dev/stdout"

修改后即可在istio-proxy看到如下accessLog（业务app pod容器无需重启）：

默认accessLogFormat：

通过如下命令查看accessLogFormat配置：

istioctl proxy-config listeners <your pod> -n <your namespace> -o json

[%START_TIME%] \"%REQ(:METHOD)% %REQ(X-ENVOY-ORIGINAL-PATH?:PATH)% %PROTOCOL%\" %RESPONSE_CODE% %RESPONSE_FLAGS% \"%DYNAMIC_METADATA(istio.mixer:status)%\" %BYTES_RECEIVED% %BYTES_SENT% %DURATION% %RESP(X-ENVOY-UPSTREAM-SERVICE-TIME)% \"%REQ(X-FORWARDED-FOR)%\" \"%REQ(USER-AGENT)%\" \"%REQ(X-REQUEST-ID)%\" \"%REQ(:AUTHORITY)%\" \"%UPSTREAM_HOST%\" %UPSTREAM_CLUSTER% %UPSTREAM_LOCAL_ADDRESS% %DOWNSTREAM_LOCAL_ADDRESS% %DOWNSTREAM_REMOTE_ADDRESS% %REQUESTED_SERVER_NAME%\n

实际日志与默认格式对比：

[2019-09-24T05:57:56.836Z]
"POST /256/vendorRetire/list HTTP/1.1"
200 - "-"
113 6029 110 110
"-" "Apache-HttpClient/4.5.7 (Java/1.8.0_192)" "d17359bf-7b4c-4c44-8dab-003c59fa810b" "s267.tsp"
"127.0.0.1:8080" inbound|80|http|s267.tsp.svc.cluster.local -
172.25.193.104:8080 172.25.123.74:33340 -

====================================================================================

[%START_TIME%]
\"%REQ(:METHOD)% %REQ(X-ENVOY-ORIGINAL-PATH?:PATH)% %PROTOCOL%\"
%RESPONSE_CODE% %RESPONSE_FLAGS% \"%DYNAMIC_METADATA(istio.mixer:status)%\"
%BYTES_RECEIVED% %BYTES_SENT% %DURATION% %RESP(X-ENVOY-UPSTREAM-SERVICE-TIME)%
\"%REQ(X-FORWARDED-FOR)%\" \"%REQ(USER-AGENT)%\" \"%REQ(X-REQUEST-ID)%\" \"%REQ(:AUTHORITY)%\"
\"%UPSTREAM_HOST%\" %UPSTREAM_CLUSTER% %UPSTREAM_LOCAL_ADDRESS%
%DOWNSTREAM_LOCAL_ADDRESS% %DOWNSTREAM_REMOTE_ADDRESS% %REQUESTED_SERVER_NAME%\n