-
Notifications
You must be signed in to change notification settings - Fork 383
How to configure Keybox to log to elasticsearch
Thomas edited this page Nov 9, 2016
·
3 revisions
Unfortunately I haven't figured this out: but looks like so far:
You need to edit the
KeyBoxConfig.properties file located in (from root of unzipped directory) KeyBox-jetty/jetty/keybox/WEB-INF/classes
enableInternalAudit=false
Then I need to somehow do this (per a request from a user)
This can be done now (kind of) by setting an appender for log4j
https://github.com/skavanagh/KeyBox/blob/master/src/main/resources/log4j.xml#L14-L26
and defining the auditLogAppender property
https://github.com/skavanagh/KeyBox/blob/master/src/main/resources/log4j2.xml and looking at lines 14-26 (which are)
<!-- System audit example using logstash
<Socket name="logstash-socket-appender" host="127.0.0.1" port="5300">
<SerializedLayout/>
</Socket>
-->
</Appenders>
<Loggers>
<!-- System audit example using logstash
<Logger name="com.keybox.manage.util.SystemAudit" level="info" additivity="false">
<AppenderRef ref="logstash-socket-appender"/>
</Logger>
I guess I remove the <!--??
https://github.com/skavanagh/KeyBox/blob/master/src/main/resources/KeyBoxConfig.properties#L22
Will finish once done.