# <source>
#   @type            tail
#   path             sample/app*.log
#   pos_file         sample/source.app.pos
#   tag              app
#   format           json
#   read_from_head   true
#   path_key         file
#   time_key         time
#   keep_time_key    true
#   time_format      %Y-%m-%dT%H:%M:%S.%NZ
# </source>

# <source>
#   @type            tail
#   path             sample/ingress-nginx*.log
#   pos_file         sample/source.ingress-nginx.pos
#   tag              lb
#   format           json
#   read_from_head   true
#   path_key         file
#   time_key         time
#   keep_time_key    true
#   time_format      %Y-%m-%dT%H:%M:%S.%NZ
# </source>

# <source>
#   @type            tail
#   path             sample/hub*.log
#   pos_file         sample/source.hub.pos
#   tag              hub
#   format           json
#   read_from_head   true
#   path_key         file
#   time_key         time
#   keep_time_key    true
#   time_format      %Y-%m-%dT%H:%M:%S.%NZ
# </source>

<source>
  @type            tail
  path             sample/db*.log
  pos_file         sample/source.master.pos
  tag              master
  format           json
  read_from_head   true
  path_key         file
  time_key         time
  keep_time_key    true
  time_format      %Y-%m-%dT%H:%M:%S.%NZ
</source>

# <source>
#   @type            tail
#   path             sample/secondary*.log
#   pos_file         sample/source.secondary.pos
#   tag              secondary
#   format           json
#   read_from_head   true
#   path_key         file
#   time_key         time
#   keep_time_key    true
#   time_format      %Y-%m-%dT%H:%M:%S.%NZ
# </source>

# <source>
#   @type            tail
#   path             sample/arbiter*.log
#   pos_file         sample/source.arbiter.pos
#   tag              arbiter
#   format           json
#   read_from_head   true
#   path_key         file
#   time_key         time
#   keep_time_key    true
#   time_format      %Y-%m-%dT%H:%M:%S.%NZ
# </source>

#######################################
# syslog messages
#######################################
# <source>
#   @type          tail
#   format         syslog
#   path           sample/sys/messages.log
#   pos_file       sample/sys/messages.pos
#   read_from_head true
#   tag            syslog.messages
# </source>

#######################################
# syslog secure
#######################################
# <source>
#   @type          tail
#   format         syslog
#   path           sample/sys/secure.log
#   pos_file       sample/sys/secure.pos
#   read_from_head true
#   tag            syslog.secure
# </source>

#######################################
# syslog audit
#######################################
# <source>
#   @type          tail
#   path           sample/sys/audit.log
#   pos_file       sample/sys/audit.log.pos
#   read_from_head true
#   tag            syslog.audit
#   <parse>
#     @type        none
#   </parse>
# </source>

# <source>
#   @type          tail
#   path           sample/mongo/master/audit.json,sample/mongo/secondary/audit.json
#   pos_file       sample/mongo/fluentd-mongodb-audit.pos
#   read_from_head true
#   tag            mongodb.audit
#   format         json
#   path_key       file
# </source>

#######################################
# mysql
#######################################
# <source>
#   @type           sql
#   host            mysql
#   port            53306
#   database        jumpserver
#   adapter         mysql2
#   username        jumpserver
#   password        yqk1EkO3eB(j50FR5anXSNT@oXfMil
#   tag_prefix      fortress
#   select_interval 60s  # optional
#   select_limit    500  # optional
#   state_file      /var/log/fluentd-sql-state.pos

#   <table>
#     table         audits_operatelog
#     tag           operatelog
#     update_column datetime
#   </table>

#   <table>
#     table         audits_passwordchangelog
#     tag           passwordchangelog
#     update_column datetime
#   </table>

#   <table>
#     table         audits_userloginlog
#     tag           userloginlog
#     update_column datetime
#   </table>

#   <table>
#     table         terminal_command
#     tag           command
#     update_column timestamp
#   </table>

# </source>

<filter **>
  @type            light_core
  sentry           true
  sentry_dsn       https://4447403a2a86437491d307ceb72898e5@sentry.zf.link/4
  mongo_querytime  300
  mongo_severity   F,E
  mongo_dataBytes  1073741824
  mongo_reslen     20971520
  lb_stream        stderr
  lb_code          400,500
  lb_elapsed       5
  lb_ignore        /api/environment/list,/api/certificate/list?condition%5Bkind%5D=SSL
  app_status       500
  app_elapsed      5
</filter>

# <match app>
#   @type            rewrite_tag_filter
#   <rule>
#     key            cname
#     pattern        ^(.+)$
#     tag            $1
#   </rule>
# </match>

# <match **>
#   @type                copy

#   <store>
#     @type              elasticsearch
#     host               es-master
#     port               9200
#     logstash_format    true
#     logstash_prefix    ${tag}
#     <buffer>
#       @type              file
#       path               sample/fluentd
#       flush_interval     5s
#       flush_thread_count 3  # 收集日志的线程数，太大回占用过多的cpu资源，太小收集日志不及时
#     </buffer>
#     log_es_400_reason  true
#     reconnect_on_error true
#     request_timeout    10s
#     suppress_type_name true # 去除 type_name 警告
#   </store>
# </match>

<match **>
  @type            stdout
</match>

<label @FLUENT_LOG>
  <match fluent.*>
    @type stdout
  </match>
</label>