Modify Fluentbit to add appropriate tags

Adding auth tags for the logs to support special filter
for openstack and application security logs

Change-Id: Ifbd2395e4268d8d8fc4a2a3ac4d351db3d3e0845

fluent-logging/values.yaml

@@ -288,6 +288,35 @@ conf:
               key: level
               pattern: CRITICAL
               tag: critical.${tag}
+      #NOTE(tp6510): This prefixes the tag for auth entries
+      # it allows for lookups on openstack logs with
+      # a particular auth log (ie: auth.openstack.keystone)
+    - tag_auth_log:
+        header: match
+        type: rewrite_tag_filter
+        expression: "*.openstack.**"
+        rule:
+          -
+            - header: rule
+              key: application
+              pattern: keystone
+              tag: auth.${tag}
+            - header: rule
+              key: application
+              pattern: horizon
+              tag: auth.${tag}
+            - header: rule
+              key: application
+              pattern: mariadb
+              tag: auth.${tag}
+            - header: rule
+              key: application
+              pattern: memcached
+              tag: auth.${tag}
+            - header: rule
+              key: application
+              pattern: rabbitmq
+              tag: auth.${tag}
     - journal_elasticsearch:
         header: match
         type: elasticsearch