6503644140
In fluentd v1.0, "format" became a deprecated parameter, replaced by "<parse>" Change-Id: I0825e81fcd90fbc7f64c8df3ea9ae199ad79294a
13 lines
412 B
Django/Jinja
13 lines
412 B
Django/Jinja
<source>
|
|
@type tail
|
|
path /var/log/kolla/zookeeper/zookeeper.log
|
|
pos_file /var/run/td-agent/zookeeper.pos
|
|
tag infra.*
|
|
<parse>
|
|
@type multiline
|
|
format_firstline /^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2},\d{3} \S+ \S+ \S+ .*$/
|
|
format1 /^(?<Timestamp>\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2},\d{3}) \[(?<server_id>\S+)\] \S+ (?<log_level>\S+) (?<Payload>.*)$/
|
|
time_key Timestamp
|
|
</parse>
|
|
</source>
|