Untitled

mail@pastecode.io avatar
unknown
plain_text
2 years ago
1.2 kB
3
Indexable
Never
# cat /etc/app/parsers.conf 
[PARSER]
    Name        cri
    Format      regex
    Regex       ^(?<time>[^ ]+) (?<stream>stdout|stderr) (?<logtag>[^ ]*) (?<_source>(?<log>.*))$
    Time_Key    time
    Time_Format %Y-%m-%dT%H:%M:%S.%L%z
[PARSER]
    Name        nginx-main-access
    Format      regex
    Regex       ^(?<_source>(?<remote>[^ ]+) - (?<user>[^ ]+) \[(?<time>[^\]]*)\] "(?<method>[^ ]+) (?<path>[^ ]+) (?<protocol>[^\"]+)" (?<status>\d+) (?<bytes_sent>\d+) "(?<referer>[^\"]+)" "(?<user_agent>[^\"]+)" "(?<cookie>[^\"]*)" (?>[^ ]+) (?<request_time>[^ ]+) (?>[^ ]+) (?<upstream_addr>[^a-z]+) (?>[^ ]+) (?<upstream_response_time>[^a-z]+) (?>[^ ]+) (?<upstream_status>[^a-z]+) (?>[^ ]+) (?<upstream_cache_status>[^  ]+) (?>[^ ]+) (?<host>[^ ]+) (?>[^ ]+) (?<http_host>[^  ]+) (?>[^ ]+) (?<request_id>[^  ]+).*)$
    Time_Key    time
    Time_Format %d/%b/%Y:%H:%M:%S %z
    Types       status:integer bytes_sent:integer request_time:float
[PARSER]
    Name        gloo-access
    Format      json
    Time_Key    systemTime
    Time_Format %Y-%m-%dT%H:%M:%S.%L%z
[PARSER]
    # https://github.com/fluent/fluent-bit/issues/1534
    Name   catchall
    Format regex
    Regex  ^(?<message>.*)$