6503644140
In fluentd v1.0, "format" became a deprecated parameter, replaced by "<parse>" Change-Id: I0825e81fcd90fbc7f64c8df3ea9ae199ad79294a
31 lines
910 B
Django/Jinja
31 lines
910 B
Django/Jinja
# mysqld and its wrapper script mysqld_safe output logs using a different timestamp.
|
|
# Defer parsing the logs until the different formats have been retagged.
|
|
<source>
|
|
@type tail
|
|
path /var/log/kolla/mariadb/mariadb.log
|
|
pos_file /var/run/td-agent/mariadb.pos
|
|
tag infra.mariadb
|
|
enable_watch_timer false
|
|
<parse>
|
|
@type multiline
|
|
format_firstline /^(\d{4}-\d{2}-\d{2}|\d{6}) /
|
|
format1 /^(?<Payload>.*)/
|
|
</parse>
|
|
</source>
|
|
<source>
|
|
@type tail
|
|
path /var/log/kolla/mariadb/xinetd.log
|
|
pos_file /var/run/td-agent/mariadb-xinetd.pos
|
|
tag infra.mariadb-xinetd
|
|
ignore_repeated_permission_error true
|
|
enable_watch_timer false
|
|
<parse>
|
|
@type multiline
|
|
format_firstline /^\d{2}/\d{1,2}/\d{1,2}@\d{1,2}:\d{1,2}:\d{1,2}\: (START|EXIT)\: /
|
|
format1 /^(?<Timestamp>\S+) (?<Payload>.*)?$/
|
|
time_key Timestamp
|
|
keep_time_key true
|
|
time_format %y/%m/%d@%T
|
|
</parse>
|
|
</source>
|