Created
May 5, 2020 13:29
-
-
Save omerh/fc810bc963d73967978592154a82403e to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| apiVersion: v1 | |
| kind: ConfigMap | |
| metadata: | |
| name: fluent-bit-config | |
| namespace: logging | |
| labels: | |
| k8s-app: fluent-bit | |
| data: | |
| # Configuration files: server, input, filters and output | |
| # ====================================================== | |
| fluent-bit.conf: | | |
| [SERVICE] | |
| Flush 1 | |
| Log_Level info | |
| Daemon off | |
| Parsers_File parsers.conf | |
| HTTP_Server On | |
| HTTP_Listen 0.0.0.0 | |
| HTTP_Port 2020 | |
| @INCLUDE input-kubernetes.conf | |
| @INCLUDE filter-kubernetes.conf | |
| @INCLUDE output-elasticsearch.conf | |
| input-kubernetes.conf: | | |
| [INPUT] | |
| Name tail | |
| Tag kube.team1.* | |
| Path /var/log/containers/*team1*.log | |
| Parser docker | |
| DB /var/log/flb_kube_team1.db | |
| Mem_Buf_Limit 5MB | |
| Skip_Long_Lines Off | |
| Refresh_Interval 10 | |
| [INPUT] | |
| Name tail | |
| Tag kube.team2.* | |
| Path /var/log/containers/*team2*.log | |
| Parser docker | |
| DB /var/log/flb_kube_team2.db | |
| Mem_Buf_Limit 5MB | |
| Skip_Long_Lines Off | |
| Refresh_Interval 10 | |
| filter-kubernetes.conf: | | |
| [FILTER] | |
| Name kubernetes | |
| Match kube.* | |
| Kube_URL https://kubernetes.default.svc:443 | |
| Kube_CA_File /var/run/secrets/kubernetes.io/serviceaccount/ca.crt | |
| Kube_Token_File /var/run/secrets/kubernetes.io/serviceaccount/token | |
| Kube_Tag_Prefix kube.var.log.containers. | |
| Merge_Log On | |
| Merge_Log_Key log_processed | |
| K8S-Logging.Parser On | |
| K8S-Logging.Exclude Off | |
| output-elasticsearch.conf: | | |
| [OUTPUT] | |
| Name es | |
| Match kube.team1.* | |
| Host ${FLUENT_ELASTICSEARCH_HOST} | |
| Port ${FLUENT_ELASTICSEARCH_PORT} | |
| Logstash_Format On | |
| Logstash_Prefix team1 | |
| Time_Key @timestamp | |
| tls On | |
| Retry_Limit False | |
| [OUTPUT] | |
| Name es | |
| Match kube.team2.* | |
| Host ${FLUENT_ELASTICSEARCH_HOST} | |
| Port ${FLUENT_ELASTICSEARCH_PORT} | |
| Logstash_Format On | |
| Logstash_Prefix team2 | |
| Time_Key @timestamp | |
| tls On | |
| Retry_Limit False | |
| parsers.conf: | | |
| [PARSER] | |
| Name apache | |
| Format regex | |
| Regex ^(?<host>[^ ]*) [^ ]* (?<user>[^ ]*) \[(?<time>[^\]]*)\] "(?<method>\S+)(?: +(?<path>[^\"]*?)(?: +\S*)?)?" (?<code>[^ ]*) (?<size>[^ ]*)(?: "(?<referer>[^\"]*)" "(?<agent>[^\"]*)")?$ | |
| Time_Key time | |
| Time_Format %d/%b/%Y:%H:%M:%S %z | |
| [PARSER] | |
| Name apache2 | |
| Format regex | |
| Regex ^(?<host>[^ ]*) [^ ]* (?<user>[^ ]*) \[(?<time>[^\]]*)\] "(?<method>\S+)(?: +(?<path>[^ ]*) +\S*)?" (?<code>[^ ]*) (?<size>[^ ]*)(?: "(?<referer>[^\"]*)" "(?<agent>[^\"]*)")?$ | |
| Time_Key time | |
| Time_Format %d/%b/%Y:%H:%M:%S %z | |
| [PARSER] | |
| Name apache_error | |
| Format regex | |
| Regex ^\[[^ ]* (?<time>[^\]]*)\] \[(?<level>[^\]]*)\](?: \[pid (?<pid>[^\]]*)\])?( \[client (?<client>[^\]]*)\])? (?<message>.*)$ | |
| [PARSER] | |
| Name nginx | |
| Format regex | |
| Regex ^(?<remote>[^ ]*) (?<host>[^ ]*) (?<user>[^ ]*) \[(?<time>[^\]]*)\] "(?<method>\S+)(?: +(?<path>[^\"]*?)(?: +\S*)?)?" (?<code>[^ ]*) (?<size>[^ ]*)(?: "(?<referer>[^\"]*)" "(?<agent>[^\"]*)")?$ | |
| Time_Key time | |
| Time_Format %d/%b/%Y:%H:%M:%S %z | |
| [PARSER] | |
| Name json | |
| Format json | |
| Time_Key time | |
| Time_Format %d/%b/%Y:%H:%M:%S %z | |
| [PARSER] | |
| Name docker | |
| Format json | |
| Time_Key time | |
| Time_Format %Y-%m-%dT%H:%M:%S.%L | |
| Time_Keep On | |
| [PARSER] | |
| Name syslog | |
| Format regex | |
| Regex ^\<(?<pri>[0-9]+)\>(?<time>[^ ]* {1,2}[^ ]* [^ ]*) (?<host>[^ ]*) (?<ident>[a-zA-Z0-9_\/\.\-]*)(?:\[(?<pid>[0-9]+)\])?(?:[^\:]*\:)? *(?<message>.*)$ | |
| Time_Key time | |
| Time_Format %b %d %H:%M:%S |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
not able to see team1 and team2 in kibana