Istio组件日志设置

1.istio-pilot日志级别

编辑istio-system.deployment.istio-pilot，修改args中--log_output_level=default:指定日志级别

2.istio-policy日志级别设置同istio-pilot

3.istio-proxy（envoy）日志级别设置

进入istio-proxy容器中，通过如下命令进行设置：

curl -X POST localhost:15000/logging?level=trace

4.istio-proxy access日志设置

官方参考：https://istio.io/docs/tasks/telemetry/logs/access-log/

修改istio-system.configMap.istio中的accessLogFile: "/dev/stdout"

修改后即可在istio-proxy看到如下accessLog（业务app pod容器无需重启）：

默认accessLogFormat：

通过如下命令查看accessLogFormat配置：

istioctl proxy-config listeners <your pod> -n <your namespace> -o json

[%sTART_TIME%] \"%rEQ(:METHOD)% %rEQ(X-ENVOY-ORIGINAL-PATH?:PATH)% %PROTOCOL%\" %rESPONSE_CODE% %rESPONSE_FLAGS% \"%DYNAMIC_MetaDATA(istio.mixer:status)%\" %BYTES_RECEIVED% %BYTES_SENT% %DURATION% %rESP(X-ENVOY-UPSTREAM-SERVICE-TIME)% \"%rEQ(X-FORWARDED-FOR)%\" \"%rEQ(USER-AGENT)%\" \"%rEQ(X-REQUEST-ID)%\" \"%rEQ(:AUTHORITY)%\" \"%UPSTREAM_HOST%\" %UPSTREAM_CLUSTER% %UPSTREAM_LOCAL_ADDRESS% %DOWNSTREAM_LOCAL_ADDRESS% %DOWNSTREAM_REMOTE_ADDRESS% %rEQUESTED_SERVER_NAME%\n

实际日志与默认格式对比：

[2019-09-24T05:57:56.836Z]
"POST /256/vendorRetire/list HTTP/1.1"
200 - "-"
113 6029 110 110
"-" "Apache-HttpClient/4.5.7 (Java/1.8.0_192)" "d17359bf-7b4c-4c44-8dab-003c59fa810b" "s267.tsp"
"127.0.0.1:8080" inbound|80|http|s267.tsp.svc.cluster.local -
172.25.193.104:8080 172.25.123.74:33340 -

====================================================================================

[%sTART_TIME%]
\"%rEQ(:METHOD)% %rEQ(X-ENVOY-ORIGINAL-PATH?:PATH)% %PROTOCOL%\"
%rESPONSE_CODE% %rESPONSE_FLAGS% \"%DYNAMIC_MetaDATA(istio.mixer:status)%\"
%BYTES_RECEIVED% %BYTES_SENT% %DURATION% %rESP(X-ENVOY-UPSTREAM-SERVICE-TIME)%
\"%rEQ(X-FORWARDED-FOR)%\" \"%rEQ(USER-AGENT)%\" \"%rEQ(X-REQUEST-ID)%\" \"%rEQ(:AUTHORITY)%\"
\"%UPSTREAM_HOST%\" %UPSTREAM_CLUSTER% %UPSTREAM_LOCAL_ADDRESS%
%DOWNSTREAM_LOCAL_ADDRESS% %DOWNSTREAM_REMOTE_ADDRESS% %rEQUESTED_SERVER_NAME%\n