Untitled
unknown
plain_text
3 years ago
1.2 kB
7
Indexable
# cat /etc/app/parsers.conf
[PARSER]
Name cri
Format regex
Regex ^(?<time>[^ ]+) (?<stream>stdout|stderr) (?<logtag>[^ ]*) (?<_source>(?<log>.*))$
Time_Key time
Time_Format %Y-%m-%dT%H:%M:%S.%L%z
[PARSER]
Name nginx-main-access
Format regex
Regex ^(?<_source>(?<remote>[^ ]+) - (?<user>[^ ]+) \[(?<time>[^\]]*)\] "(?<method>[^ ]+) (?<path>[^ ]+) (?<protocol>[^\"]+)" (?<status>\d+) (?<bytes_sent>\d+) "(?<referer>[^\"]+)" "(?<user_agent>[^\"]+)" "(?<cookie>[^\"]*)" (?>[^ ]+) (?<request_time>[^ ]+) (?>[^ ]+) (?<upstream_addr>[^a-z]+) (?>[^ ]+) (?<upstream_response_time>[^a-z]+) (?>[^ ]+) (?<upstream_status>[^a-z]+) (?>[^ ]+) (?<upstream_cache_status>[^ ]+) (?>[^ ]+) (?<host>[^ ]+) (?>[^ ]+) (?<http_host>[^ ]+) (?>[^ ]+) (?<request_id>[^ ]+).*)$
Time_Key time
Time_Format %d/%b/%Y:%H:%M:%S %z
Types status:integer bytes_sent:integer request_time:float
[PARSER]
Name gloo-access
Format json
Time_Key systemTime
Time_Format %Y-%m-%dT%H:%M:%S.%L%z
[PARSER]
# https://github.com/fluent/fluent-bit/issues/1534
Name catchall
Format regex
Regex ^(?<message>.*)$
Editor is loading...