Fluent configuration for ES

fluent.conf

<source>
  @type  forward
  @id    input1
  @label @mainstream
  port  24224
</source>
<source>
  @type http
  @id input2
  @label @mainstream
  port 9880
  bind 0.0.0.0
  body_size_limit 32m
  keepalive_timeout 10s
</source>
<filter **>
  @type stdout
</filter>

<label @mainstream>
  <match app.*>
    @type elasticsearch
    host elastic-svc
    port 9200
    index_name fluentd
    type_name fluentd
  </match>
  <match docker.**>
    @type file
    @id   output_docker1
    path         /fluentd/log/docker.*.log
    symlink_path /fluentd/log/docker.log
    append       true
    time_slice_format %Y%m%d
    time_slice_wait   1m
    time_format       %Y%m%dT%H%M%S%z
  </match>
  <match **>
    @type file
    @id   output1
    path         /fluentd/log/data.*.log
    symlink_path /fluentd/log/data.log
    append       true
    time_slice_format %Y%m%d
    time_slice_wait   10m
    time_format       %Y%m%dT%H%M%S%z
  </match>
</label>