Last active
June 23, 2025 02:40
-
-
Save Kalki5/4d95a306f53221c3315606cea705755e to your computer and use it in GitHub Desktop.
fluent-bit-values.yml
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
resources: | |
limits: | |
cpu: 100m | |
memory: 128Mi | |
requests: | |
cpu: 100m | |
memory: 128Mi | |
## https://docs.fluentbit.io/manual/administration/configuring-fluent-bit/classic-mode/configuration-file | |
config: | |
service: | | |
[SERVICE] | |
Daemon Off | |
Flush {{ .Values.flush }} | |
Log_Level {{ .Values.logLevel }} | |
Parsers_File /fluent-bit/etc/parsers.conf | |
Parsers_File /fluent-bit/etc/conf/custom_parsers.conf | |
HTTP_Server On | |
HTTP_Listen 0.0.0.0 | |
HTTP_Port {{ .Values.metricsPort }} | |
Health_Check On | |
## https://docs.fluentbit.io/manual/pipeline/inputs | |
inputs: | | |
[INPUT] | |
Name tail | |
Path /var/log/containers/*.log | |
multiline.parser docker, cri | |
Tag kube.infra.<namespace_name>.<pod_name>.<container_name>.<docker_id> | |
Tag_Regex (?<pod_name>[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*)_(?<namespace_name>[^_]+)_(?<container_name>.+)-(?<docker_id>[a-z0-9]{64}) | |
Mem_Buf_Limit 5MB | |
Skip_Long_Lines On | |
## https://docs.fluentbit.io/manual/pipeline/filters | |
filters: | | |
[FILTER] | |
Name kubernetes | |
Match kube.infra.* | |
Merge_Log On | |
Keep_Log Off | |
Kube_Tag_Prefix kube.infra. | |
Regex_Parser kubernetes_tag_parser | |
K8S-Logging.Parser On | |
K8S-Logging.Exclude On | |
Labels Off | |
Annotations Off | |
[FILTER] | |
Name nest | |
Match kube.infra.* | |
Operation lift | |
Nested_under kubernetes | |
Add_prefix kubernetes_ | |
[FILTER] | |
Name modify | |
Match kube.infra.* | |
Remove_wildcard kubernetes_container_hash | |
Remove_wildcard kubernetes_container_image | |
Remove_wildcard kubernetes_container_name | |
Remove_wildcard kubernetes_docker_id | |
Remove_wildcard kubernetes_pod_id | |
Remove _p | |
## https://docs.fluentbit.io/manual/pipeline/outputs | |
outputs: | | |
[OUTPUT] | |
Name http | |
Match * | |
URI /api/default/fluentbit1/_json | |
Host 74.225.135.216 | |
Port 31815 | |
tls Off | |
Format json | |
Json_date_key _timestamp | |
Json_date_format iso8601 | |
HTTP_User [email protected] | |
HTTP_Passwd l7heIHijpV30O2PL | |
compress gzip | |
## https://docs.fluentbit.io/manual/pipeline/parsers | |
customParsers: | | |
[PARSER] | |
Name docker_no_time | |
Format json | |
Time_Keep Off | |
Time_Key time | |
Time_Format %Y-%m-%dT%H:%M:%S.%L | |
[PARSER] | |
Name kubernetes_tag_parser | |
Format regex | |
Regex (?<namespace_name>[^_]+)\.(?<pod_name>[a-z0-9](?:[-a-z0-9]*[a-z0-9])?(?:\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*)\.(?<container_name>.+).(?<docker_id>[a-z0-9]{64})$ | |
logLevel: warn |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment