Text file src/edge-infra.dev/config/pallets/o11y/fluentbit/base/parsers/parser-authlog.yaml

Documentation: edge-infra.dev/config/pallets/o11y/fluentbit/base/parsers

     1apiVersion: fluentbit.fluent.io/v1alpha2
     2kind: ClusterParser
     3metadata:
     4  name: authlog
     5  labels:
     6    fluentbit.fluent.io/enabled: "true"
     7spec:
     8  regex:
     9    regex: '^(?<time>[A-Z][a-z]+\s+\d+\s+\d+:\d+:\d+)\s+(?<hostname>[^\s]+)\s+(?<type>[^\s]+):\s+(?<message>.+)$'
    10    timeKey: time

View as plain text