fluent_conf

fluent.conf

<system>
  log_level info
</system>

# Still tail your test file
<source>
  @type tail
  path /var/log/test.log
  pos_file /var/log/fluentd/test.pos
  tag test_logs
  <parse>
    @type none
  </parse>
  read_from_head true
</source>

# Tail syslog for cmdlog lines (from the PROMPT_COMMAND/logger approach)
<source>
  @type tail
  path /var/log/syslog
  pos_file /var/log/fluentd/syslog.pos
  tag cmdlog
  <parse>
    @type regexp
    expression /cmdlog: (?<message>.*)/
  </parse>
  read_from_head false
</source>

# Ship both streams
<match test_logs cmdlog>
  @type copy
  <store>
    @type stdout
  </store>
  <store>
    @type forward
    <server>
      host 10.50.20.9
      port 24224
    </server>
  </store>
</match>