fluentd

fluentd.conf

<source>
  @type forward
  port 24224
  bind 0.0.0.0
  <parse>
    @type "json"
  </parse>
  time_format %Y-%m-%dT%H:%M:%S.%L
</source>

<filter **>
  @type parser
  key_name "log"
  reserve_data true
  reserve_time true
  hash_value_field "parsed"
  remove_key_name_field false
  replace_invalid_sequence true
  emit_invalid_record_to_error false
  <parse>
    @type "json"
  </parse>
</filter>

<match *.**>
  @type copy
  <store>
    @type elasticsearch
    host "#{ENV['ES_HOST']}"
    port "#{ENV['ES_PORT']}"
    user "#{ENV['ES_USER']}"
    password "#{ENV['ES_PASS']}"
    scheme https

    logstash_format true
    logstash_prefix "fluentd"
    logstash_dateformat %Y-%m-%d

    include_tag_key true
    type_name access_log
    tag_key @log_name

    <buffer>
      flush_mode interval
      flush_interval 5s
    </buffer>
  </store>
  <store>
    @type stdout
  </store>
</match>