Documentation

https://docs.fluentbit.io/manual/pipeline/inputs (opens in a new tab)

inputs: | [INPUT] Name tail Path /var/log/containers/.log multiline.parser docker, cri Tag kube. Mem_Buf_Limit 5MB Skip_Long_Lines On DB /var/log/flb_kube.db

[INPUT] Name systemd Tag host.* Systemd_Filter _SYSTEMD_UNIT=kubelet.service Read_From_Tail On

https://docs.fluentbit.io/manual/pipeline/filters (opens in a new tab)

filters: | [FILTER] Name kubernetes Match kube.* Merge_Log On Keep_Log On K8S-Logging.Parser On K8S-Logging.Exclude Off

outputs: | [OUTPUT] Name es Match kube.* Host 3.108.238.148 Port 9200 Logstash_Format On Retry_Limit False

--- Security and Authentication ---

TLS On TLS.Verify Off HTTP_User elastic HTTP_Passwd te6jTygbU0uJn*kf7UVg Suppress_Type_Name On Logstash_Prefix eks-kube Trace_Error On

[OUTPUT] Name es Match host.* Host 3.108.238.148 Port 9200 Logstash_Format On Logstash_Prefix eks-host Retry_Limit False

--- Security and Authentication ---

TLS On TLS.Verify Off HTTP_User elastic HTTP_Passwd te6jTygbU0uJn*kf7UVg Suppress_Type_Name On

https://docs.fluentbit.io/manual/administration/configuring-fluent-bit/classic-mode/upstream-servers (opens in a new tab)

This configuration is deprecated, please use extraFiles instead.

upstream:

https://docs.fluentbit.io/manual/pipeline/parsers (opens in a new tab)

customParsers: | [PARSER] Name docker_no_time Format json Time_Keep Off Time_Key time Time_Format %Y-%m-%dT%H:%M:%S.%L

This allows adding more files with arbitrary filenames to /fluent-bit/etc/conf by providing key/value pairs.

The key becomes the filename, the value becomes the file content.

extraFiles:

upstream.conf: |

[UPSTREAM]

upstream1

[NODE]

name node-1

host 127.0.0.1

port 43000

example.conf: |

[OUTPUT]

Name example

Match foo.*

Host bar

The config volume is mounted by default, either to the existingConfigMap value, or the default of "fluent-bit.fullname"

volumeMounts:

• name: config mountPath: /fluent-bit/etc/conf