diff --git a/fluent-bit/README.md b/fluent-bit/README.md index 21f7cd6..61172fa 100644 --- a/fluent-bit/README.md +++ b/fluent-bit/README.md @@ -11,6 +11,7 @@ $ mkdir -p data/{etc,var} $ wget -P data/etc https://github.com/fluent/fluent-bit/raw/master/conf/fluent-bit.conf \ https://github.com/fluent/fluent-bit/raw/master/conf/parsers.conf \ https://github.com/fluent/fluent-bit/raw/master/conf/plugins.conf +$ vim data/etc/fluent-bit.conf $ docker-compose up -d $ docker-compose logs --tail 10 -f ``` diff --git a/fluent-bit/data/etc/parsers.conf b/fluent-bit/data/etc/parsers.conf index 7170654..ec1b11b 100644 --- a/fluent-bit/data/etc/parsers.conf +++ b/fluent-bit/data/etc/parsers.conf @@ -38,6 +38,10 @@ Time_Key time Time_Format %d/%b/%Y:%H:%M:%S %z +[PARSER] + Name logfmt + Format logfmt + [PARSER] Name docker Format json @@ -124,3 +128,11 @@ Name kube-custom Format regex Regex (?[^.]+)?\.?(?[a-z0-9](?:[-a-z0-9]*[a-z0-9])?(?:\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*)_(?[^_]+)_(?.+)-(?[a-z0-9]{64})\.log$ + +[PARSER] + # Examples: TCP: https://rubular.com/r/Q8YY6fHqlqwGI0 UDP: https://rubular.com/r/B0ID69H9FvN0tp + Name kmsg-netfilter-log + Format regex + Regex ^\<(?[0-9]{1,5})\>1 (?