From 995a1874ff1d09cb58e9caf6739e598e7a29a00e Mon Sep 17 00:00:00 2001 From: jiasirui Date: Mon, 18 Jul 2022 14:14:43 +0800 Subject: [PATCH] fmt the collect parse for barbican Change-Id: I786a3004fe0359676998ddeb912240525c074f72 --- devstack/fluentd-conf/input/barbican.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devstack/fluentd-conf/input/barbican.conf b/devstack/fluentd-conf/input/barbican.conf index 8a8f17c..94323fc 100644 --- a/devstack/fluentd-conf/input/barbican.conf +++ b/devstack/fluentd-conf/input/barbican.conf @@ -5,7 +5,7 @@ tag devstack format multiline format_firstline /^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}.\d{3} \d+ \S+ \S+ \[(\S+ req-\S+ \S+ \S+ \S+ \S+ \S+|-)\]/ - format1 /^(?\S+ \S+) (?\d+) (?\S+) (?\S+) (\[(?\S+) (req-(?\S+) (?\S+) (?\S+) (?\S+) (?\S+) (?\S+)|-)\])? (?.*)?$/ + format1 /^(?\S+ \S+) (?\d+) (?\S+) (?\S+) (\[(?\S+) (?\S+) (?\S+) (?\S+) (?\S+) (?\S+) (?\S+)|-)\])? (?.*)?$/ time_key Timestamp keep_time_key true time_format %F %T.%L