搜索看看
WGLOG查询主机日志文件的某一条日志采集内容(
需要升级到专业版
)
根据ID查询某一条日志采集的日志内容
1、示例,下面【2】是参数说明:
将请求URL中的IP和端口替换为自己的实际信息即可
请求URL:http://localhost:9993/agentLogOpenQuery/fileWarnStateDetail 请求方式:POST 请求参数(Content-Type:application/json): { "wgToken":"65d05df102851c6535322e73b2f99c06", "fileWarnId":"1964913937711497216", "fileWarnStateId":"2087118824196407296" } 返回结果: { "code": "0", "msg": "", "data": { "gatherLogContent": "[Line-138627] Aug 11 17:59:49 VM-16-13-centos sshd[1477]: Accepted password for root from 111.19.28.168 port 7870 ssh2 [Line-138628] Aug 11 17:59:49 VM-16-13-centos sshd[1477]: pam_unix(sshd:session): session opened for user root by (uid=0) ", "startRows": "138627", "warnRows": "138629", "fileWarnId": "1964913937711497216", "filePath": "/var/log/secure", "logSize": "251.0B", "createTime": 1786442879138, "id": "2087118824196407296" } }
2、参数说明:
以下请求参数
fileWarnId和fileWarnStateId
的值,请依次对应使用
日志采集列表接口返回的fileWarnId和id(就是对应这里的fileWarnStateId)字段结果值就可以
请求参数(Content-Type:application/json): { "wgToken": "必填,config/application.yml里的wgToken配置项的md5加密字符串,大小写均可", "fileWarnId": "主机采集日志文件的ID", "fileWarnStateId": "日志采集记录的ID" } 返回结果: { "code": "0成功,1错误", "msg": "错误信息", "data": { "gatherLogContent": "采集的日志,每行之间使用分割", "startRows": "采集开始行数,此次扫描的起始行数", "warnRows": "采集结束行数,下次从此行开始采集", "fileWarnId": "日志文件ID", "filePath": "日志文件完整路径", "logSize": "本次采集日志内容体积大小", "createTime": "采集时间,毫秒", "id": "采集记录ID" } }