Last active
March 10, 2022 09:15
-
-
Save mksvdmtr/e4f8c1f48e5689fec7dca115d85f6e7e to your computer and use it in GitHub Desktop.
Fluent Bit multiple output
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
input-kubernetes.conf: | | |
[INPUT] | |
Name tail | |
Tag kube.* | |
Path /var/log/containers/*.log | |
Parser docker | |
DB /var/log/fb.db | |
DB.Sync Normal | |
Docker_Mode On | |
Buffer_Max_Size 5M | |
Rotate_Wait 30 | |
Mem_Buf_Limit 50MB | |
Skip_Long_Lines On | |
Refresh_Interval 10 | |
filter-kubernetes.conf: | | |
[FILTER] | |
Name kubernetes | |
Match kube.* | |
Merge_Log On | |
Keep_Log Off | |
Merge_Log_Key log_processed | |
K8S-Logging.Parser On | |
K8S-Logging.Exclude On | |
Annotations On | |
Labels On | |
Buffer_Size 0 | |
output-es.conf: | | |
[OUTPUT] | |
Name es | |
Match kube.var.log.containers.log-pod-test* | |
Host es.lan | |
Port 30920 | |
Index log-pod | |
[OUTPUT] | |
Name es | |
Match kube.var.log.containers.another-log-pod-test* | |
Host es.lan | |
Port 30922 | |
Index another-log-pod | |
parsers.conf: | | |
[PARSER] | |
Name docker | |
Format json | |
Time_Key time | |
Time_Format %Y-%m-%dT%H:%M:%S.%L | |
Time_Keep On |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment