Merge pull request #5378 from BacLuc/parse-container-log-files-with-f…

…luentd ecamp3-logging: strip prefix "{datetime} std(out|err) F " in fluentd
ecamp · Jul 28, 2024 · 6b3a7f4 · 6b3a7f4
2 parents dfc1bc4 + bf9f3b8
commit 6b3a7f4
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.ops/ecamp3-logging/templates/fluentd/fluentd_clusterfilter.yaml b/.ops/ecamp3-logging/templates/fluentd/fluentd_clusterfilter.yaml
@@ -11,6 +11,13 @@ spec:
   filters:
     - customPlugin:
         config: |
+          <filter **>
+            @type record_transformer
+            enable_ruby
+            <record>
+              log ${record['log'].gsub(/^.*std(out|err) F {/, "{")}
+            </record>
+          </filter>
           <filter **>
             @type parser
             key_name log