venus/devstack/fluentd-conf/input/barbican.conf
jiasirui 995a1874ff fmt the collect parse for barbican
Change-Id: I786a3004fe0359676998ddeb912240525c074f72
2022-07-18 14:14:43 +08:00

14 lines
651 B
Plaintext

<source>
@type tail
path /var/log/barbican/*.log
pos_file /var/run/td-agent/devstack-openstack_barbican.pos
tag devstack
format multiline
format_firstline /^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}.\d{3} \d+ \S+ \S+ \[(\S+ req-\S+ \S+ \S+ \S+ \S+ \S+|-)\]/
format1 /^(?<Timestamp>\S+ \S+) (?<Pid>\d+) (?<log_level>\S+) (?<python_module>\S+) (\[(?<global_id>\S+) (?<request_id>\S+) (?<user_id>\S+) (?<tenant_id>\S+) (?<domain_id>\S+) (?<user_domain>\S+) (?<project_domain>\S+)|-)\])? (?<Payload>.*)?$/
time_key Timestamp
keep_time_key true
time_format %F %T.%L
ignore_repeated_permission_error true
enable_watch_timer false
</source>