调试Promtail多行日志解析：如何在控制台查看合并结果？

我有多行MinIO审计日志如下：

Tue Oct 28 18:22:38 UTC 2025: POST /log HTTP/1.1
Host: audit-logger:8080
User-Agent: MinIO (linux; amd64; mode-server-xl-single; docker 2025-09-07T16:13:09Z RELEASE.2025-09-07T16-13-09Z 07c3a429bfed433e49018cb0f78a52145d4bedeb;  CPU (total_cpus:8, total_cores:1; vendor:GenuineIntel; family:6; model:63; stepping:2; model_name:Intel(R) Xeon(R) CPU E5-2699 v3 @ 2.30GHz))
Content-Length: 1949
Authorization: secret123
Content-Type: application/json
X-Minio-Deployment-Id: 0edf4f89-a8d5-4648-8239-383b59c98631
X-Minio-Version: 2025-09-07T16:13:09Z
X-Minio-Webhook-Payload-Count: 1

{"version":"1","deploymentid":"0edf4f89-a8d5-4648-8239-383b59c98631","time":"2025-10-28T18:22:38.107719793Z","event":"","trigger":"incoming","api":{"name":"AccountInfo","status":"OK","statusCode":200,"rx":0,"tx":1271,"txHeaders":346,"timeToFirstByte":"3183933ns","timeToFirstByteInNS":"3183933","timeToResponse":"3206489ns","timeToResponseInNS":"3206489"},"remotehost":"192.168.9.246","requestID":"1872BAC4AB3C00EF","userAgent":"MinIO (linux; amd64) madmin-go/3.0.70 MinIO Console/(dev)","requestPath":"/minio/admin/v3/accountinfo","requestHost":"127.0.0.1:9000","requestClaims":{"accessKey":"BLOMIXYWBQ9FAQFDXGCS","exp":1761717665,"parent":"minioadmin"},"requestHeader":{"Authorization":"AWS4-HMAC-SHA256 Credential=BLOMIXYWBQ9FAQFDXGCS/20251028//s3/aws4_request, SignedHeaders=host;x-amz-content-sha256;x-amz-date;x-amz-security-token, Signature=8e61b4b939d4205e661be5ab1d9528364923df4ac11edf3ccb45fc0af2b87682","Delimiter":"/","Prefix":"","User-Agent":"MinIO (linux; amd64) madmin-go/3.0.70 MinIO Console/(dev)","X-Amz-Content-Sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","X-Amz-Date":"20251028T182238Z","X-Amz-Security-Token":"eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJhY2Nlc3NLZXkiOiJCTE9NSVhZV0JROUZBUUZEWEdDUyIsImV4cCI6MTc2MTcxNzY2NSwicGFyZW50IjoibWluaW9hZG1pbiJ9.F-NKF27oTrhhOw7c9c2O0SD4fA0i7oGBlIhvgeFreXAnfXbfnRvSgHfhx9DwsK00U85pfTJcfEcGKkOwKCnU5Q","X-Forwarded-For":"192.168.9.246"},"responseHeader":{"Accept-Ranges":"bytes","Content-Length":"1271","Content-Type":"application/json","Server":"MinIO","Strict-Transport-Security":"max-age=31536000; includeSubDomains","Vary":"Origin,Accept-Encoding","X-Amz-Id-2":"dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8","X-Amz-Request-Id":"1872BAC4AB3C00EF","X-Content-Type-Options":"nosniff","X-Xss-Protection":"1; mode=block"},"tags":{"GetObject":"name=buckets/.usage.json,pool=1,set=1"},"accessKey":"BLOMIXYWBQ9FAQFDXGCS","parentUser":"minioadmin"}
Tue Oct 28 18:22:46 UTC 2025: POST /log HTTP/1.1
Host: audit-logger:8080
User-Agent: MinIO (linux; amd64; mode-server-xl-single; docker 2025-09-07T16:13:09Z RELEASE.2025-09-07T16-13-09Z 07c3a429bfed433e49018cb0f78a52145d4bedeb;  CPU (total_cpus:8, total_cores:1; vendor:GenuineIntel; family:6; model:63; stepping:2; model_name:Intel(R) Xeon(R) CPU E5-2699 v3 @ 2.30GHz))
Content-Length: 1949
Authorization: secret123
Content-Type: application/json
X-Minio-Deployment-Id: 0edf4f89-a8d5-4648-8239-383b59c98631
X-Minio-Version: 2025-09-07T16:13:09Z
X-Minio-Webhook-Payload-Count: 1

当前Promtail配置如下：

pipeline_stages:
  - multiline:
      firstline: '^[A-Z][a-z]{2} [A-Z][a-z]{2} \d{1,2} \d{2}:\d{2}:\d{2} UTC \d{4}:'
      max_wait_time: 10s

已在正则调试器中确认首行识别正确，multiline阶段能将日志合并为单个字符串，请问如何将合并后的结果输出到控制台？

有两种常用方式可以将合并后的日志输出到控制台：

1. 配置控制台输出目标 #

修改Promtail的clients配置，添加控制台输出客户端，可保留原Loki输出也可直接替换：

clients:
  - url: http://loki:3100/loki/api/v1/push  # 可选，保留原Loki输出
  - type: stdout  # 添加控制台输出
    format: raw   # 输出原始合并后的日志，也可指定为json格式

2. 添加调试用日志打印阶段 #

如果只是临时调试，不想修改输出目标，可在pipeline中添加log阶段直接打印合并内容：

pipeline_stages:
  - multiline:
      firstline: '^[A-Z][a-z]{2} [A-Z][a-z]{2} \d{1,2} \d{2}:\d{2}:\d{2} UTC \d{4}:'
      max_wait_time: 10s
  - log:
      level: info
      message: "合并后日志: {{.Entry}}"  # 用模板引用合并后的日志内容

注意：log阶段仅适合调试场景，生产环境建议使用第一种方式配置控制台输出。

内容的提问来源于stack exchange，提问作者AndAsh AndAsh