# CONFIGURED BY ANSIBLE [INPUT] name systemd systemd_filter _SYSTEMD_UNIT=coredns.service read_from_tail on tag coredns # parses all fields from MESSAGE [FILTER] name parser match coredns key_name MESSAGE parser coredns_combined preserve_key false reserve_data false [FILTER] name modify match coredns add sensor coredns@{{inventory_hostname_short}} #[OUTPUT] # name file # match coredns # path /var/log # file fluent-bit.log [OUTPUT] {% if log_output == 'vlogs' %} name http match coredns host {{log_host}} port {{log_port}} uri /insert/jsonline?_stream_fields=stream&_msg_field=sensor&_time_field=date # &debug=1 format json_lines json_date_format iso8601 {% elif log_output == 'elk' %} name es match coredns host {{log_host}} port {{log_port}} path /_bulk compress gzip http_user {{log_http_user}} http_passwd {{log_http_passwd}} index coredns-{{env}} #replace_dots on #trace_output on trace_error on tls off {% else %} name opensearch match coredns host {{log_host}} port {{log_port}} tls on tls.verify {{ssl_verify}} index coredns-{{env}} http_user {{log_http_user}} http_passwd {{log_http_passwd}} suppress_type_name on #replace_dots on trace_error on {% endif %}