OK. What is the format? Ralph
> On Oct 12, 2020, at 10:00 PM, רפי <rafr...@gmail.com> wrote: > > I don't have control on the elastic system and it is configured to get the > data as log files not json. > My team is responsible for several components and there are other teams > that are responsible for other components. > In addition there is an analytics team that is responsible for the elastic > stack system. They ask all teams to align the components logs to predefined > format in order to parse all logs in the same way. > So unfortunately, I can't use json. I just must order my fields in the > correct order as I asked to. > > בתאריך יום ב׳, 12 באוק׳ 2020 ב-23:03 מאת Ralph Goers < > ralph.go...@dslextreme.com>: > >> If you are sending to Elastic why not use JSON? See >> http://logging.apache.org/log4j/2.x/manual/cloud.html < >> http://logging.apache.org/log4j/2.x/manual/cloud.html>. >> >> Ralph >> >>> On Oct 12, 2020, at 11:49 AM, רפי <rafr...@gmail.com> wrote: >>> >>> I tried it and it didn't work. It just print the following text - >>> "%replace${event:Level}" >>> >>> I need it since I must put the log level after the "action" field. This >> is >>> needed for other system (elastic stack system) of log analysis. >>> The problem is that the action field is not available for me in >> log4j2.xml, >>> but only in some specific file. On the other hand the log level is not >>> available for me in the same file where the action field is available. >>> So of course I can change the code. But I prefer to fix it with >>> configuration and I thought that I can fix it by using log4j2.xml. >>> >>> >>> בתאריך יום ב׳, 12 באוק׳ 2020 ב-21:36 מאת Ralph Goers < >>> ralph.go...@dslextreme.com>: >>> >>>> Possibly something like that. As I said, I haven’t had a chance to >>>> investigate it so I am not sure if interpolation is supported in that >> exact >>>> usage. >>>> >>>> I do wonder why you need to do it this way though. >>>> >>>> Ralph >>>> >>>>> On Oct 12, 2020, at 9:31 AM, רפי <rafr...@gmail.com> wrote: >>>>> >>>>> I will try it. >>>>> Do you mean that I will use the following: >>>>> >>>>> %replace{%msg}{LOGLEVEL}$${event:Level} >>>>> >>>>> ? >>>>> >>>>> >>>>> בתאריך יום ב׳, 12 באוק׳ 2020 ב-18:35 מאת Ralph Goers < >>>>> ralph.go...@dslextreme.com>: >>>>> >>>>>> I suspect that using $${event:Level} could be made to work but I would >>>>>> have to try it to see what it would take and right now I have been >>>>>> extremely busy with the $dayjob$. >>>>>> >>>>>> Ralph >>>>>> >>>>>>> On Oct 12, 2020, at 2:56 AM, רפי <rafr...@gmail.com> wrote: >>>>>>> >>>>>>> In log4j2 configured by log4j2.xml - how can I replace some text with >>>>>>> other conversion >>>>>>> pattern? >>>>>>> >>>>>>> >>>>>>> For example, I have some message with the word "LOGLEVEL" and I want >> to >>>>>>> replace it with the current log level (WARN/DEBUG/ERROR/TRACE/INFO). >>>> The >>>>>>> conversion pattern >>>>>>> <https://logging.apache.org/log4j/2.x/manual/layouts.html> for the >> log >>>>>>> level is %p or %level, so I tried this: >>>>>>> >>>>>>> %replace{%msg}{LOGLEVEL}{%level} >>>>>>> >>>>>>> But instead of replacing the "LOGLEVEL" text with the actual *level* >> it >>>>>>> just replaced it with the text "%level". >>>>>>> >>>>>>> *The original message was*: this trace is LOGLEVEL log >>>>>>> >>>>>>> *For INFO trace I want to get*: this trace is INFO log >>>>>>> >>>>>>> *But I actually got*: this trace is %level log >>>>>>> >>>>>>> How can I achieve this requirement? >>>>>>> >>>>>>> >>>>>>> >>>>>>> I asked it on StackOverflow but no one knows the answer. >>>>>>> >>>>>>> >>>>>> >>>> >> https://stackoverflow.com/questions/64305649/log4j2-replace-some-text-with-other-log4j2-conversion-pattern-with-level-for >>>>>>> >>>>>>> >>>>>>> >>>>>>> Thanks, >>>>>>> >>>>>>> Refael >>>>>> >>>>>> >>>>>> >>>>>> --------------------------------------------------------------------- >>>>>> To unsubscribe, e-mail: log4j-user-unsubscr...@logging.apache.org >>>>>> For additional commands, e-mail: log4j-user-h...@logging.apache.org >>>>>> >>>>>> >>>> >>>> >>>> >>>> --------------------------------------------------------------------- >>>> To unsubscribe, e-mail: log4j-user-unsubscr...@logging.apache.org >>>> For additional commands, e-mail: log4j-user-h...@logging.apache.org >>>> >>>> >> >> --------------------------------------------------------------------- To unsubscribe, e-mail: log4j-user-unsubscr...@logging.apache.org For additional commands, e-mail: log4j-user-h...@logging.apache.org