nginx日志输出到远程rsyslog日志服务器

nginx配置可以参考
nginx日志添加HTTP返回内容JSON格式输出, openresty+lua实现

在rsyslog服务器中配置

vim /etc/rsyslog.conf

#添加如下内容

$FileOwner root
$FileGroup root
$FileCreateMode 0755 #文件权限
$DirCreateMode 0755 #目录权限
$Umask 0022

vim /etc/rsyslog.d/nginx.conf

#添加如下内容
$template nginx_access_file,"/data/logs/webapi/%$year%-%$month%-%$day%/%programname%/%$hour%-access.log"
$template nginx_access_format,"%msg:2:$%\n"

$template nginx_error_file,"/data/logs/webapi/%$year%-%$month%-%$day%/%programname%/%$hour%-error.log"
$template nginx_error_format,"%msg:2:$%\n"

local5.* ?nginx_access_file;nginx_access_format

local6.* ?nginx_error_file;nginx_error_format

#开机启动服务
sudo systemctl enable rsyslog
#启动服务
sudo systemctl start rsyslog
#重启服务
sudo systemctl restart rsyslog

可以看到日志按日期归档，且每个应用单独的子目录

[root@job webapi]# tree -L 2 /data/logs/webapi/
/data/logs/webapi/
├── 2023-09-24
│   ├── account_api
│   ├── fileupload_api
│   ├── mall_rpc
│   └── statis_api
└── 2023-09-25
    ├── account_api
    ├── account_rpc
    ├── fileupload_api
    ├── fileupload_rpc
    ├── mall_api
    ├── mall_rpc
    ├── statis_api
    └── statis_rpc

#查看具体的应用目录日志
[root@job webapi]# ls --block-size=m /data/logs/webapi/2023-09-25/mall_api/ -al
total 2659M
drwxr-xr-x  2 root root   1M Sep 25 22:00 .
drwxr-xr-x 10 root root   1M Sep 25 05:00 ..
-rwxr-xr-x  1 root root  65M Sep 25 00:59 00-access.log
-rwxr-xr-x  1 root root  43M Sep 25 01:59 01-access.log
-rwxr-xr-x  1 root root  29M Sep 25 02:59 02-access.log
-rwxr-xr-x  1 root root  25M Sep 25 03:59 03-access.log
-rwxr-xr-x  1 root root  27M Sep 25 04:59 04-access.log
-rwxr-xr-x  1 root root  43M Sep 25 05:59 05-access.log
-rwxr-xr-x  1 root root  66M Sep 25 06:59 06-access.log
-rwxr-xr-x  1 root root  89M Sep 25 07:59 07-access.log
-rwxr-xr-x  1 root root 106M Sep 25 08:59 08-access.log
-rwxr-xr-x  1 root root   1M Sep 25 08:38 08-error.log
-rwxr-xr-x  1 root root 125M Sep 25 09:59 09-access.log
-rwxr-xr-x  1 root root 145M Sep 25 10:59 10-access.log
-rwxr-xr-x  1 root root 161M Sep 25 11:59 11-access.log
-rwxr-xr-x  1 root root 170M Sep 25 12:59 12-access.log
-rwxr-xr-x  1 root root 145M Sep 25 13:59 13-access.log
-rwxr-xr-x  1 root root 136M Sep 25 14:59 14-access.log
-rwxr-xr-x  1 root root 141M Sep 25 15:59 15-access.log
-rwxr-xr-x  1 root root   1M Sep 25 15:19 15-error.log
-rwxr-xr-x  1 root root 150M Sep 25 16:59 16-access.log
-rwxr-xr-x  1 root root 156M Sep 25 17:59 17-access.log
-rwxr-xr-x  1 root root 168M Sep 25 18:59 18-access.log
-rwxr-xr-x  1 root root 190M Sep 25 19:59 19-access.log
-rwxr-xr-x  1 root root 203M Sep 25 20:59 20-access.log
-rwxr-xr-x  1 root root 175M Sep 25 21:59 21-access.log
-rwxr-xr-x  1 root root 110M Sep 25 22:46 22-access.log
[root@job webapi]#