# Receive events from 24224/tcp # This is used by log forwarding and the fluent-cat command <source>
@type forward port 24224
</source>
# this.host:9880/myapp.access?json={“event”:“data”} <source>
@type http port 9880
</source>
<source>
@type tail @label @SYSTEM
</source>
<label @SYSTEM>
<filter var.log.middleware.**> @type grep # ... </filter> <match **> @type s3 # ... </match>
</label>
<filter myapp.access>
@type record_transformer <record> host_param "#{Socket.gethostname}" </record>
</filter>
# Match events tagged with “myapp.access” and # store them to /var/log/fluent/access.%Y-%m-%d # Of course, you can control how you partition your data # with the time_slice_format option. <match myapp.access>
@type file path /var/log/fluent/access
</match>
# Include config files in the ./config.d directory @include config.d/*.conf
array_param [
"a", "b"
] hash_param {
"k":"v", "k1":10
}
<match **>
@type mail subject "[CRITICAL] foo's alert system"
</match>
<match tag>
@type map map '[["code." + tag, time, { "code" => record["code"].to_i}], ["time." + tag, time, { "time" => record["time"].to_i}]]' multi true
</match>
str_param “foo”
host_param “#{Socket.gethostname}” # host_param is actual hostname like `webserver1`.
str_param “foonbar” # n is interpreted as actual LF character