Skip to content

Instantly share code, notes, and snippets.

@Kalki5
Last active June 23, 2025 02:40
Show Gist options
  • Save Kalki5/4d95a306f53221c3315606cea705755e to your computer and use it in GitHub Desktop.
Save Kalki5/4d95a306f53221c3315606cea705755e to your computer and use it in GitHub Desktop.
fluent-bit-values.yml
resources:
limits:
cpu: 100m
memory: 128Mi
requests:
cpu: 100m
memory: 128Mi
## https://docs.fluentbit.io/manual/administration/configuring-fluent-bit/classic-mode/configuration-file
config:
service: |
[SERVICE]
Daemon Off
Flush {{ .Values.flush }}
Log_Level {{ .Values.logLevel }}
Parsers_File /fluent-bit/etc/parsers.conf
Parsers_File /fluent-bit/etc/conf/custom_parsers.conf
HTTP_Server On
HTTP_Listen 0.0.0.0
HTTP_Port {{ .Values.metricsPort }}
Health_Check On
## https://docs.fluentbit.io/manual/pipeline/inputs
inputs: |
[INPUT]
Name tail
Path /var/log/containers/*.log
multiline.parser docker, cri
Tag kube.infra.<namespace_name>.<pod_name>.<container_name>.<docker_id>
Tag_Regex (?<pod_name>[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*)_(?<namespace_name>[^_]+)_(?<container_name>.+)-(?<docker_id>[a-z0-9]{64})
Mem_Buf_Limit 5MB
Skip_Long_Lines On
## https://docs.fluentbit.io/manual/pipeline/filters
filters: |
[FILTER]
Name kubernetes
Match kube.infra.*
Merge_Log On
Keep_Log Off
Kube_Tag_Prefix kube.infra.
Regex_Parser kubernetes_tag_parser
K8S-Logging.Parser On
K8S-Logging.Exclude On
Labels Off
Annotations Off
[FILTER]
Name nest
Match kube.infra.*
Operation lift
Nested_under kubernetes
Add_prefix kubernetes_
[FILTER]
Name modify
Match kube.infra.*
Remove_wildcard kubernetes_container_hash
Remove_wildcard kubernetes_container_image
Remove_wildcard kubernetes_container_name
Remove_wildcard kubernetes_docker_id
Remove_wildcard kubernetes_pod_id
Remove _p
## https://docs.fluentbit.io/manual/pipeline/outputs
outputs: |
[OUTPUT]
Name http
Match *
URI /api/default/fluentbit1/_json
Host 74.225.135.216
Port 31815
tls Off
Format json
Json_date_key _timestamp
Json_date_format iso8601
HTTP_User [email protected]
HTTP_Passwd l7heIHijpV30O2PL
compress gzip
## https://docs.fluentbit.io/manual/pipeline/parsers
customParsers: |
[PARSER]
Name docker_no_time
Format json
Time_Keep Off
Time_Key time
Time_Format %Y-%m-%dT%H:%M:%S.%L
[PARSER]
Name kubernetes_tag_parser
Format regex
Regex (?<namespace_name>[^_]+)\.(?<pod_name>[a-z0-9](?:[-a-z0-9]*[a-z0-9])?(?:\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*)\.(?<container_name>.+).(?<docker_id>[a-z0-9]{64})$
logLevel: warn
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment