Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@log4js-node/gelf
Advanced tools
This is an optional appender for log4js-node.
npm install @log4js-node/gelf
The GELF appender supports sending log messages over UDP to a GELF compatible server such as Graylog. It uses node's core UDP support and does not require any other dependencies. If you use this appender, remember to call log4js.shutdown
when your application terminates, so that all messages will have been sent to the server and the UDP socket can be closed. The appender supports passing custom fields to the server in both the config, and in individual log messages (see examples below).
type
- @log4js-node/gelf
host
- string
(defaults to localhost
) - the gelf server hostnameport
- integer
(defaults to 12201
) - the port the gelf server is listening onhostname
- string
(defaults to OS.hostname()
) - the hostname used to identify the origin of the log messages.facility
- string
(optional)customFields
- object
(optional) - fields to be added to each log message; custom fields must start with an underscore.log4js.configure({
appenders: {
gelf: { type: '@log4js-node/gelf' }
},
categories: {
default: { appenders: ['gelf'], level: 'info' }
}
});
This will send log messages to a server at localhost:12201
.
log4js.configure({
appenders: {
gelf: { type: '@log4js-node/gelf', host: 'gelf.server', customFields: { '_something': 'yep' } }
},
categories: {
default: { appenders: ['gelf'], level: 'info' }
}
});
This will result in all log messages having the custom field _something
set to 'yep'.
log4js.configure({
appenders: {
gelf: { type: '@log4js-node/gelf', customFields: { '_thing': 'isathing' } }
},
categories: {
default: { appenders: ['gelf'], level: 'info' }
}
});
const logger = log4js.getLogger();
logger.error({ GELF: true, _thing2: 'alsoathing' }, 'oh no, something went wrong');
This will result in a log message with the custom fields _thing
and _thing2
. Note that log message custom fields will override config custom fields.
FAQs
GELF Appender for log4js-node
We found that @log4js-node/gelf demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.