Grafana 资源管理器中的日志格式

Question

我在grafana中看到这样的日志，其中每一行都是一个json，并且在该json中有一个字段日志，其中包含实际的spring boot日志，

{"time":"2024-02-14T15:07:44.646998525Z","stream":"stdout","_p":"F","log":"\t... 88 common frames omitted","kubernetes":{"pod_id":"ff01dde1-a3ee-44ec-87e4-d08b7ad7cb2e","labels":{"app.kubernetes.io/instance":"common-cis-fraud-detection","app.kubernetes.io/name":"cis-fraud-detection","app.kubernetes.io/part-of":"common"},"annotations":{"common-platform.com/logs":"enabled","kubectl.kubernetes.io/restartedAt":"2024-02-14T08:50:14+01:00","prometheus.io/path":"/actuator/prometheus","prometheus.io/port":"8501","prometheus.io/scrape":"true"}

{"time":"2024-02-14T15:07:44.646996072Z","stream":"stdout","_p":"F","log":"\tat org.jose4j.jwk.HttpsJwks.getJsonWebKeys(HttpsJwks.java:161)","kubernetes":{"pod_id":"ff01dde1-a3ee-44ec-87e4-d08b7ad7cb2e","labels":{"app.kubernetes.io/instance":"common-cis-fraud-detection","app.kubernetes.io/name":"cis-fraud-detection","app.kubernetes.io/part-of":"common"},"annotations":{"common-platform.com/logs":"enabled","kubectl.kubernetes.io/restartedAt":"2024-02-14T08:50:14+01:00","prometheus.io/path":"/actuator/prometheus","prometheus.io/port":"8501","prometheus.io/scrape":"true"}

{"time":"2024-02-14T15:07:44.646994795Z","stream":"stdout","_p":"F","log":"\tat org.jose4j.jwk.HttpsJwks.refresh(HttpsJwks.java:204)","kubernetes":{"pod_id":"ff01dde1-a3ee-44ec-87e4-d08b7ad7cb2e","labels":{"app.kubernetes.io/instance":"common-cis-fraud-detection","app.kubernetes.io/name":"cis-fraud-detection","app.kubernetes.io/part-of":"common"},"annotations":{"common-platform.com/logs":"enabled","kubectl.kubernetes.io/restartedAt":"2024-02-14T08:50:14+01:00","prometheus.io/path":"/actuator/prometheus","prometheus.io/port":"8501","prometheus.io/scrape":"true"}

我想对其进行格式化以仅查看这些 json 中“log”键的值，但无法理解如何在 grafana 日志资源管理器中解析它

Answer 1

需要添加json格式化程序，然后就可以过滤掉字段了：

按操作->格式->Json。如果有任何非 json 行，请添加“无管道错误”操作以将其过滤掉

Answer 2

我必须做：

{app_kubernetes_io_instance="common-cis-fraud-detection", environment="pro"} | json | line_format `{{.log}}`