Contents

<source>
  @type tail

  path /var/log/containers/*.log
  pos_file fluentd-docker.pos
  time_format %Y-%m-%dT%H:%M:%S
  tag kubernetes.*
  format json
</source>

<filter kubernetes.var.log.containers.**.log>
  @type kubernetes_metadata
</filter>

<filter kubernetes.var.log.containers.**.log>
  @type record_transformer
  enable_ruby true

  <record>
    role ${record["kubernetes"]["labels"]["app"]}
    container_name ${record["kubernetes"]["container_name"]}
  </record>
</filter>

<match kubernetes.var.log.containers.**.log>
  @type rewrite_tag_filter
  rewriterule1 role (.+) service.$1
</match>

<match service.**>
  @type rewrite_tag_filter
  rewriterule1 container_name web nginx.${tag}
</match>

<match nginx.**>
  @type rewrite_tag_filter
  rewriterule1 stream stdout access.${tag}
  rewriterule2 stream stderr error.${tag}
</match>

<filter access.nginx.**>
  @type parser
  format ltsv
  key_name log
  reserve_data
</filter>

<filter error.nginx.**>
  @type concat
  key log
  stream_identity_key container_id
  multiline_start_regexp /^-e:2:in `\/'/
  multiline_end_regexp /^-e:4:in/
</filter>

<filter error.nginx.**>
 @type parser
 format multiline
 format_firstline /^\d{4}/\d{2}/\d{2} \d{2}:\d{2}:\d{2} \[\w+\] (?<pid>\d+).(?<tid>\d+): /
 format1 /^(?<time>\d{4}/\d{2}/\d{2} \d{2}:\d{2}:\d{2}) \[(?<log_level>\w+)\] (?<pid>\d+).(?<tid>\d+): (?<message>.*)/
 multiline_flush_interval 3s
 key_name log
 reserve_data
</filter>

<match access.nginx.**>
  @type kinesis_firehose
  include_time_key true
  region dummy-region
  delivery_stream_name dummy-stream
  num_threads 15
  flush_interval 10
  buffer_chunk_limit 1m
  try_flush_interval 0.1
  queued_chunk_flush_interval 0.01
</match>

<match error.nginx.**>
  @type slack
  slackbot_url https://dummy
  channel nginx-error
  flush_interval 60s
</match>

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
fluentspec-0.1.0	example/fluent.conf