Skip to content

How to configure Keybox to log to elasticsearch

Thomas edited this page Nov 9, 2016 · 3 revisions

Unfortunately I haven't figured this out: but looks like so far:

You need to edit the

KeyBoxConfig.properties file located in (from root of unzipped directory) KeyBox-jetty/jetty/keybox/WEB-INF/classes

enableInternalAudit=false

Then I need to somehow do this (per a request from a user)

This can be done now (kind of) by setting an appender for log4j

https://github.com/skavanagh/KeyBox/blob/master/src/main/resources/log4j.xml#L14-L26

and defining the auditLogAppender property

https://github.com/skavanagh/KeyBox/blob/master/src/main/resources/log4j2.xml and looking at lines 14-26 (which are)

    <!-- System audit example using logstash
    <Socket name="logstash-socket-appender" host="127.0.0.1" port="5300">
        <SerializedLayout/>
    </Socket>
    -->
</Appenders>

<Loggers>
    <!-- System audit example using logstash
    <Logger name="com.keybox.manage.util.SystemAudit" level="info" additivity="false">
        <AppenderRef ref="logstash-socket-appender"/>
    </Logger>

I guess I remove the <!--??

https://github.com/skavanagh/KeyBox/blob/master/src/main/resources/KeyBoxConfig.properties#L22

Will finish once done.