Commit a4418a32 authored by Achilleas Pipinellis's avatar Achilleas Pipinellis

Merge branch 'hchouraria-doc-admin-log-parsing-log-time-range' into 'master'

Docs: Add command to print log time range

See merge request gitlab-org/gitlab!55830
parents 9c9f25c1 b8a7ca9c
...@@ -14,10 +14,12 @@ Find more about them [in Audit Events documentation](audit_events.md). ...@@ -14,10 +14,12 @@ Find more about them [in Audit Events documentation](audit_events.md).
System log files are typically plain text in a standard log file format. System log files are typically plain text in a standard log file format.
This guide talks about how to read and use these system log files. This guide talks about how to read and use these system log files.
Read more about how to Read more about the log system and using the logs:
[customize logging on Omnibus GitLab installations](https://docs.gitlab.com/omnibus/settings/logs.html)
- [Customize logging on Omnibus GitLab installations](https://docs.gitlab.com/omnibus/settings/logs.html)
including adjusting log retention, log forwarding, including adjusting log retention, log forwarding,
switching logs from JSON to plain text logging, and more. switching logs from JSON to plain text logging, and more.
- [How to parse and analyze JSON logs](troubleshooting/log_parsing.md).
## `production_json.log` ## `production_json.log`
......
...@@ -41,6 +41,20 @@ jq -cR 'fromjson?' file.json | jq <COMMAND> ...@@ -41,6 +41,20 @@ jq -cR 'fromjson?' file.json | jq <COMMAND>
By default `jq` will error out when it encounters a line that is not valid JSON. By default `jq` will error out when it encounters a line that is not valid JSON.
This skips over all invalid lines and parses the rest. This skips over all invalid lines and parses the rest.
#### Print a JSON log's time range
```shell
cat log.json | (head -1; tail -1) | jq '.time'
```
Use `zcat` if the file has been rotated and compressed:
```shell
zcat @400000006026b71d1a7af804.s | (head -1; tail -1) | jq '.time'
zcat some_json.log.25.gz | (head -1; tail -1) | jq '.time'
```
### Parsing `production_json.log` and `api_json.log` ### Parsing `production_json.log` and `api_json.log`
#### Find all requests with a 5XX status code #### Find all requests with a 5XX status code
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment