fluent-plugin-kubernetes_sumologic 2.3.2 → 2.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (19) hide show
  1. checksums.yaml +4 -4
  2. data/Dockerfile +1 -4
  3. data/README.md +1 -1
  4. data/daemonset/nonrbac/fluentd.yaml +1474 -1
  5. data/daemonset/rbac/fluentd.yaml +1467 -1
  6. data/fluent-plugin-kubernetes_sumologic.gemspec +1 -1
  7. data/lib/fluent/plugin/filter_kubernetes_sumologic.rb +52 -21
  8. data/test/plugin/test_filter_kubernetes_sumologic.rb +840 -648
  9. metadata +2 -12
  10. data/conf.d/file/source.containers.conf +0 -64
  11. data/conf.d/file/source.docker.conf +0 -20
  12. data/conf.d/file/source.kubernetes.conf +0 -158
  13. data/conf.d/forward/.gitignore +0 -1
  14. data/conf.d/out.sumo.conf +0 -13
  15. data/conf.d/systemd/source.containers.conf +0 -47
  16. data/conf.d/systemd/source.systemd.conf +0 -1088
  17. data/etc/fluent.file.conf +0 -13
  18. data/etc/fluent.forward.conf +0 -18
  19. data/etc/fluent.systemd.conf +0 -13
data/daemonset/rbac/fluentd.yaml CHANGED
@@ -61,11 +61,16 @@ spec:
61
61
  - name: docker-logs
62
62
  hostPath:
63
63
  path: /var/lib/docker
64
+ - name: fluentd-sumologic-config
65
+ configMap:
66
+ name: fluentd-sumologic-config
64
67
  containers:
65
- - image: sumologic/fluentd-kubernetes-sumologic:v2.3.2
68
+ - image: sumologic/fluentd-kubernetes-sumologic:latest
66
69
  name: fluentd
67
70
  imagePullPolicy: Always
68
71
  volumeMounts:
72
+ - name: fluentd-sumologic-config
73
+ mountPath: /fluentd/etc
69
74
  - name: host-logs
70
75
  mountPath: /mnt/log/
71
76
  readOnly: true
@@ -83,8 +88,1469 @@ spec:
83
88
  secretKeyRef:
84
89
  name: sumologic
85
90
  key: collector-url
91
+ # Improve GC for memory limited envs like docker.
92
+ - name: RUBY_GC_HEAP_OLDOBJECT_LIMIT_FACTOR
93
+ value: "0.9"
86
94
  tolerations:
87
95
  #- operator: "Exists"
88
96
  - effect: "NoSchedule"
89
97
  key: "node-role.kubernetes.io/master"
90
98
 
99
+ ---
100
+ apiVersion: v1
101
+ kind: ConfigMap
102
+ metadata:
103
+ name: fluentd-sumologic-config
104
+ labels:
105
+ app: fluentd-sumologic
106
+ data:
107
+ out.sumo.conf: |-
108
+ <match **>
109
+ @type sumologic
110
+ log_key log
111
+ endpoint "#{ENV['COLLECTOR_URL']}"
112
+ verify_ssl "#{ENV['VERIFY_SSL']}"
113
+ log_format "#{ENV['LOG_FORMAT']}"
114
+ flush_interval "#{ENV['FLUSH_INTERVAL']}"
115
+ num_threads "#{ENV['NUM_THREADS']}"
116
+ open_timeout 60
117
+ add_timestamp "#{ENV['ADD_TIMESTAMP']}"
118
+ timestamp_key "#{ENV['TIMESTAMP_KEY']}"
119
+ proxy_uri "#{ENV['PROXY_URI']}"
120
+ </match>
121
+
122
+ fluent.file.conf: |-
123
+ <match fluent.**>
124
+ @type null
125
+ </match>
126
+
127
+ <source>
128
+ @type monitor_agent
129
+ bind 0.0.0.0
130
+ port 24220
131
+ </source>
132
+
133
+ @include /fluentd/etc/file.source.*.conf
134
+ @include /fluentd/etc/user/*.conf
135
+ @include /fluentd/etc/out.sumo.conf
136
+
137
+ fluent.forward.conf: |-
138
+ ## built-in TCP input
139
+ ## $ echo <json> | fluent-cat <tag>
140
+ <source>
141
+ @type forward
142
+ @id forward_input
143
+ port "#{ENV['FORWARD_INPUT_PORT']}"
144
+ bind "#{ENV['FORWARD_INPUT_BIND']}"
145
+ </source>
146
+
147
+ <source>
148
+ @type monitor_agent
149
+ bind 0.0.0.0
150
+ port 24220
151
+ </source>
152
+
153
+ @include /fluentd/etc/forward.source.*.conf
154
+ @include /fluentd/etc/user/*.conf
155
+ @include /fluentd/etc/out.sumo.conf
156
+
157
+ fluent.systemd.conf: |-
158
+ <match fluent.**>
159
+ @type null
160
+ </match>
161
+
162
+ <source>
163
+ @type monitor_agent
164
+ bind 0.0.0.0
165
+ port 24220
166
+ </source>
167
+
168
+ @include /fluentd/etc/systemd.source.*.conf
169
+ @include /fluentd/etc/user/*.conf
170
+ @include /fluentd/etc/out.sumo.conf
171
+
172
+ file.source.containers.conf: |-
173
+ <source>
174
+ @type tail
175
+ format json
176
+ time_key "#{ENV['TIME_KEY']}"
177
+ path "#{ENV['CONTAINER_LOGS_PATH']}"
178
+ exclude_path "#{ENV['EXCLUDE_PATH']}"
179
+ pos_file /mnt/pos/ggcp-containers.log.pos
180
+ time_format %Y-%m-%dT%H:%M:%S.%NZ
181
+ tag containers.*
182
+ read_from_head "#{ENV['READ_FROM_HEAD']}"
183
+ enable_stat_watcher "#{ENV['ENABLE_STAT_WATCHER']}"
184
+ </source>
185
+
186
+ <filter containers.**>
187
+ @type concat
188
+ key log
189
+ multiline_start_regexp "#{ENV['MULTILINE_START_REGEXP']}"
190
+ separator "#{ENV['CONCAT_SEPARATOR']}"
191
+ timeout_label @NORMAL
192
+ </filter>
193
+
194
+ <match containers.**>
195
+ @type relabel
196
+ @label @NORMAL
197
+ </match>
198
+
199
+ <label @NORMAL>
200
+ <filter containers.**>
201
+ @type kubernetes_metadata
202
+ @log_level warn
203
+ annotation_match ["sumologic\.com.*"]
204
+ de_dot false
205
+ watch "#{ENV['K8S_METADATA_FILTER_WATCH']}"
206
+ ca_file "#{ENV['K8S_METADATA_FILTER_CA_FILE']}"
207
+ verify_ssl "#{ENV['K8S_METADATA_FILTER_VERIFY_SSL']}"
208
+ client_cert "#{ENV['K8S_METADATA_FILTER_CLIENT_CERT']}"
209
+ client_key "#{ENV['K8S_METADATA_FILTER_CLIENT_KEY']}"
210
+ bearer_token_file "#{ENV['K8S_METADATA_FILTER_BEARER_TOKEN_FILE']}"
211
+ cache_size "#{ENV['K8S_METADATA_FILTER_BEARER_CACHE_SIZE']}"
212
+ cache_ttl "#{ENV['K8S_METADATA_FILTER_BEARER_CACHE_TTL']}"
213
+ tag_to_kubernetes_name_regexp '.+?\.containers\.(?<pod_name>[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*)_(?<namespace>[^_]+)_(?<container_name>.+)-(?<docker_id>[a-z0-9]{64})\.log$'
214
+ merge_json_log false
215
+ </filter>
216
+
217
+ <filter containers.**>
218
+ @type kubernetes_sumologic
219
+ source_name "#{ENV['SOURCE_NAME']}"
220
+ source_host "#{ENV['SOURCE_HOST']}"
221
+ log_format "#{ENV['LOG_FORMAT']}"
222
+ kubernetes_meta "#{ENV['KUBERNETES_META']}"
223
+ kubernetes_meta_reduce "#{ENV['KUBERNETES_META_REDUCE']}"
224
+ add_stream "#{ENV['ADD_STREAM']}"
225
+ add_time "#{ENV['ADD_TIME']}"
226
+ source_category "#{ENV['SOURCE_CATEGORY']}"
227
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
228
+ source_category_replace_dash "#{ENV['SOURCE_CATEGORY_REPLACE_DASH']}"
229
+ exclude_namespace_regex "#{ENV['EXCLUDE_NAMESPACE_REGEX']}"
230
+ exclude_pod_regex "#{ENV['EXCLUDE_POD_REGEX']}"
231
+ exclude_container_regex "#{ENV['EXCLUDE_CONTAINER_REGEX']}"
232
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
233
+ </filter>
234
+
235
+ @include /fluentd/etc/out.sumo.conf
236
+ </label>
237
+
238
+ file.source.docker.conf: |-
239
+ # Examples:
240
+ # time="2016-02-04T06:51:03.053580605Z" level=info msg="GET /containers/json"
241
+ # time="2016-02-04T07:53:57.505612354Z" level=error msg="HTTP Error" err="No such image: -f" statusCode=404
242
+ <source>
243
+ @type tail
244
+ format /^time="(?<time>[^)]*)" level=(?<severity>[^ ]*) msg="(?<message>[^"]*)"( err="(?<error>[^"]*)")?( statusCode=($<status_code>\d+))?/
245
+ time_format %Y-%m-%dT%H:%M:%S.%NZ
246
+ path /var/lib/docker.log
247
+ exclude_path "#{ENV['EXCLUDE_PATH']}"
248
+ pos_file /mnt/pos/ggcp-docker.log.pos
249
+ tag docker
250
+ enable_stat_watcher "#{ENV['ENABLE_STAT_WATCHER']}"
251
+ </source>
252
+
253
+ <filter docker.**>
254
+ @type kubernetes_sumologic
255
+ source_category docker
256
+ source_name k8s_docker
257
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
258
+ </filter>
259
+
260
+ file.source.kubernetes.conf: |-
261
+ # Example:
262
+ # 2015-12-21 23:17:22,066 [salt.state ][INFO ] Completed state [net.ipv4.ip_forward] at time 23:17:22.066081
263
+ <source>
264
+ @type tail
265
+ format /^(?<time>[^ ]* [^ ,]*)[^\[]*\[[^\]]*\]\[(?<severity>[^ \]]*) *\] (?<message>.*)$/
266
+ time_format %Y-%m-%d %H:%M:%S
267
+ path /mnt/log/salt/minion
268
+ exclude_path "#{ENV['EXCLUDE_PATH']}"
269
+ pos_file /mnt/pos/ggcp-salt.pos
270
+ tag salt
271
+ enable_stat_watcher "#{ENV['ENABLE_STAT_WATCHER']}"
272
+ </source>
273
+
274
+ <filter salt.**>
275
+ @type kubernetes_sumologic
276
+ source_category salt
277
+ source_name k8s_salt
278
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
279
+ add_stream "#{ENV['ADD_STREAM']}"
280
+ add_time "#{ENV['ADD_TIME']}"
281
+ exclude_namespace_regex "#{ENV['EXCLUDE_NAMESPACE_REGEX']}"
282
+ </filter>
283
+
284
+
285
+ # Example:
286
+ # Dec 21 23:17:22 gke-foo-1-1-4b5cbd14-node-4eoj startupscript: Finished running startup script /var/run/google.startup.script
287
+ <source>
288
+ @type tail
289
+ format syslog
290
+ path /mnt/log/startupscript.log
291
+ exclude_path "#{ENV['EXCLUDE_PATH']}"
292
+ pos_file /mnt/pos/ggcp-startupscript.log.pos
293
+ tag startupscript
294
+ enable_stat_watcher "#{ENV['ENABLE_STAT_WATCHER']}"
295
+ </source>
296
+
297
+ <filter startupscript.**>
298
+ @type kubernetes_sumologic
299
+ source_category startupscript
300
+ source_name k8s_startupscript
301
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
302
+ add_stream "#{ENV['ADD_STREAM']}"
303
+ add_time "#{ENV['ADD_TIME']}"
304
+ exclude_namespace_regex "#{ENV['EXCLUDE_NAMESPACE_REGEX']}"
305
+ </filter>
306
+
307
+
308
+ # Multi-line parsing is required for all the kube logs because very large log
309
+ # statements, such as those that include entire object bodies, get split into
310
+ # multiple lines by glog.
311
+
312
+
313
+ # Example:
314
+ # I0204 07:32:30.020537 3368 server.go:1048] POST /stats/container/: (13.972191ms) 200 [[Go-http-client/1.1] 10.244.1.3:40537]
315
+ <source>
316
+ @type tail
317
+ format multiline
318
+ multiline_flush_interval 5s
319
+ format_firstline /^\w\d{4}/
320
+ format1 /^(?<severity>\w)(?<time>\d{4} [^\s]*)\s+(?<pid>\d+)\s+(?<source>[^ \]]+)\] (?<message>.*)/
321
+ time_format %m%d %H:%M:%S.%N
322
+ path /mnt/log/kubelet.log
323
+ exclude_path "#{ENV['EXCLUDE_PATH']}"
324
+ pos_file /mnt/pos/ggcp-kubelet.log.pos
325
+ tag kubelet
326
+ enable_stat_watcher "#{ENV['ENABLE_STAT_WATCHER']}"
327
+ </source>
328
+
329
+ <filter kubelet.**>
330
+ @type kubernetes_sumologic
331
+ source_category kubelet
332
+ source_name k8s_kubelet
333
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
334
+ add_stream "#{ENV['ADD_STREAM']}"
335
+ add_time "#{ENV['ADD_TIME']}"
336
+ exclude_namespace_regex "#{ENV['EXCLUDE_NAMESPACE_REGEX']}"
337
+ </filter>
338
+
339
+
340
+ # Example
341
+ # 2017-11-06T18:53:49.774520188Z AUDIT: id="6a8sdffd918-0b6a-4aee-a3a1-f1sdf61596" ip="172.11.23.88" method="GET" user="kubelet" groups="\"system:nodes\",\"system:authenticated\"" as="<self>" asgroups="<lookup>" namespace="monty" uri="/api/v1/namespaces/monty/secrets/default-token-fntvb?resourceVersion=0"
342
+ # 2017-02-09T00:15:57.993528822Z AUDIT: id="6a8sdffd918-0b6a-4aee-a3a1-f1sdf61596" response="200"
343
+ <source>
344
+ @type tail
345
+ format json
346
+ time_key timestamp
347
+ time_format %Y-%m-%dT%H:%M:%SZ
348
+ path "#{ENV['AUDIT_LOG_PATH']}"
349
+ exclude_path "#{ENV['EXCLUDE_PATH']}"
350
+ pos_file /mnt/pos/ggcp-kube-audit.log.pos
351
+ tag kube-audit
352
+ read_from_head "#{ENV['READ_FROM_HEAD']}"
353
+ enable_stat_watcher "#{ENV['ENABLE_STAT_WATCHER']}"
354
+ </source>
355
+
356
+ <filter kube-audit.**>
357
+ @type kubernetes_sumologic
358
+ source_category kube-audit
359
+ source_name k8s_kube-audit
360
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
361
+ add_stream "#{ENV['ADD_STREAM']}"
362
+ add_time "#{ENV['ADD_TIME']}"
363
+ exclude_namespace_regex "#{ENV['EXCLUDE_NAMESPACE_REGEX']}"
364
+ </filter>
365
+
366
+
367
+ # Example:
368
+ # I0603 15:31:05.793605 6 cluster_manager.go:230] Reading config from path /etc/gce.conf
369
+ <source>
370
+ @type tail
371
+ format multiline
372
+ multiline_flush_interval 5s
373
+ format_firstline /^\w\d{4}/
374
+ format1 /^(?<severity>\w)(?<time>\d{4} [^\s]*)\s+(?<pid>\d+)\s+(?<source>[^ \]]+)\] (?<message>.*)/
375
+ time_format %m%d %H:%M:%S.%N
376
+ path /mnt/log/glbc.log
377
+ exclude_path "#{ENV['EXCLUDE_PATH']}"
378
+ pos_file /mnt/pos/ggcp-glbc.log.pos
379
+ tag glbc
380
+ enable_stat_watcher "#{ENV['ENABLE_STAT_WATCHER']}"
381
+ </source>
382
+
383
+ <filter glbc.**>
384
+ @type kubernetes_sumologic
385
+ source_category glbc
386
+ source_name k8s_glbc
387
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
388
+ add_stream "#{ENV['ADD_STREAM']}"
389
+ add_time "#{ENV['ADD_TIME']}"
390
+ exclude_namespace_regex "#{ENV['EXCLUDE_NAMESPACE_REGEX']}"
391
+ </filter>
392
+
393
+
394
+ # Example:
395
+ # I0603 15:31:05.793605 6 cluster_manager.go:230] Reading config from path /etc/gce.conf
396
+ <source>
397
+ @type tail
398
+ format multiline
399
+ multiline_flush_interval 5s
400
+ format_firstline /^\w\d{4}/
401
+ format1 /^(?<severity>\w)(?<time>\d{4} [^\s]*)\s+(?<pid>\d+)\s+(?<source>[^ \]]+)\] (?<message>.*)/
402
+ time_format %m%d %H:%M:%S.%N
403
+ path /mnt/log/cluster-autoscaler.log
404
+ exclude_path "#{ENV['EXCLUDE_PATH']}"
405
+ pos_file /mnt/pos/ggcp-cluster-autoscaler.log.pos
406
+ tag cluster-autoscaler
407
+ enable_stat_watcher "#{ENV['ENABLE_STAT_WATCHER']}"
408
+ </source>
409
+
410
+ <filter cluster-autoscaler.**>
411
+ @type kubernetes_sumologic
412
+ source_category cluster-autoscaler
413
+ source_name k8s_cluster-autoscaler
414
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
415
+ add_stream "#{ENV['ADD_STREAM']}"
416
+ add_time "#{ENV['ADD_TIME']}"
417
+ exclude_namespace_regex "#{ENV['EXCLUDE_NAMESPACE_REGEX']}"
418
+ </filter>
419
+
420
+ systemd.source.containers.conf: |-
421
+ <source>
422
+ @type tail
423
+ format json
424
+ time_key "#{ENV['TIME_KEY']}"
425
+ path "#{ENV['CONTAINER_LOGS_PATH']}"
426
+ exclude_path "#{ENV['EXCLUDE_PATH']}"
427
+ pos_file /mnt/pos/ggcp-containers.log.pos
428
+ time_format %Y-%m-%dT%H:%M:%S.%NZ
429
+ tag containers.*
430
+ read_from_head "#{ENV['READ_FROM_HEAD']}"
431
+ enable_stat_watcher "#{ENV['ENABLE_STAT_WATCHER']}"
432
+ </source>
433
+
434
+ <filter containers.**>
435
+ @type kubernetes_metadata
436
+ @log_level warn
437
+ annotation_match ["sumologic\.com.*"]
438
+ de_dot false
439
+ watch "#{ENV['K8S_METADATA_FILTER_WATCH']}"
440
+ ca_file "#{ENV['K8S_METADATA_FILTER_CA_FILE']}"
441
+ verify_ssl "#{ENV['K8S_METADATA_FILTER_VERIFY_SSL']}"
442
+ client_cert "#{ENV['K8S_METADATA_FILTER_CLIENT_CERT']}"
443
+ client_key "#{ENV['K8S_METADATA_FILTER_CLIENT_KEY']}"
444
+ bearer_token_file "#{ENV['K8S_METADATA_FILTER_BEARER_TOKEN_FILE']}"
445
+ cache_size "#{ENV['K8S_METADATA_FILTER_BEARER_CACHE_SIZE']}"
446
+ cache_ttl "#{ENV['K8S_METADATA_FILTER_BEARER_CACHE_TTL']}"
447
+ tag_to_kubernetes_name_regexp '.+?\.containers\.(?<pod_name>[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*)_(?<namespace>[^_]+)_(?<container_name>.+)-(?<docker_id>[a-z0-9]{64})\.log$'
448
+ merge_json_log false
449
+ </filter>
450
+
451
+ <filter containers.**>
452
+ @type kubernetes_sumologic
453
+ source_name "#{ENV['SOURCE_NAME']}"
454
+ source_host "#{ENV['SOURCE_HOST']}"
455
+ log_format "#{ENV['LOG_FORMAT']}"
456
+ kubernetes_meta "#{ENV['KUBERNETES_META']}"
457
+ kubernetes_meta_reduce "#{ENV['KUBERNETES_META_REDUCE']}"
458
+ add_stream "#{ENV['ADD_STREAM']}"
459
+ add_time "#{ENV['ADD_TIME']}"
460
+ source_category "#{ENV['SOURCE_CATEGORY']}"
461
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
462
+ source_category_replace_dash "#{ENV['SOURCE_CATEGORY_REPLACE_DASH']}"
463
+ exclude_namespace_regex "#{ENV['EXCLUDE_NAMESPACE_REGEX']}"
464
+ exclude_pod_regex "#{ENV['EXCLUDE_POD_REGEX']}"
465
+ exclude_container_regex "#{ENV['EXCLUDE_CONTAINER_REGEX']}"
466
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
467
+ </filter>
468
+
469
+ systemd.source.systemd.conf: |-
470
+
471
+ <source>
472
+ @type systemd
473
+ path /mnt/log/journal
474
+ filters [{"_SYSTEMD_UNIT": "addon-config.service"}]
475
+ <storage>
476
+ @type local
477
+ persistent true
478
+ path /mnt/pos/addon-config.log.pos
479
+ </storage>
480
+ tag addon-config
481
+ </source>
482
+
483
+ <filter addon-config.**>
484
+ @type kubernetes_sumologic
485
+ source_category system
486
+ source_name addon-config
487
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
488
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
489
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
490
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
491
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
492
+ </filter>
493
+
494
+ <source>
495
+ @type systemd
496
+ path /mnt/log/journal
497
+ filters [{"_SYSTEMD_UNIT": "addon-run.service"}]
498
+ <storage>
499
+ @type local
500
+ persistent true
501
+ path /mnt/pos/addon-run.log.pos
502
+ </storage>
503
+ tag addon-run
504
+ </source>
505
+
506
+ <filter addon-run.**>
507
+ @type kubernetes_sumologic
508
+ source_category system
509
+ source_name addon-run
510
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
511
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
512
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
513
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
514
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
515
+ </filter>
516
+
517
+ <source>
518
+ @type systemd
519
+ path /mnt/log/journal
520
+ filters [{"_SYSTEMD_UNIT": "cfn-etcd-environment.service"}]
521
+ <storage>
522
+ @type local
523
+ persistent true
524
+ path /mnt/pos/cfn-etcd-environment.log.pos
525
+ </storage>
526
+ tag cfn-etcd-environment
527
+ </source>
528
+
529
+ <filter cfn-etcd-environment.**>
530
+ @type kubernetes_sumologic
531
+ source_category system
532
+ source_name cfn-etcd-environment
533
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
534
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
535
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
536
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
537
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
538
+ </filter>
539
+
540
+ <source>
541
+ @type systemd
542
+ path /mnt/log/journal
543
+ filters [{"_SYSTEMD_UNIT": "cfn-signal.service"}]
544
+ <storage>
545
+ @type local
546
+ persistent true
547
+ path /mnt/pos/cfn-signal.log.pos
548
+ </storage>
549
+ tag cfn-signal
550
+ </source>
551
+
552
+ <filter cfn-signal.**>
553
+ @type kubernetes_sumologic
554
+ source_category system
555
+ source_name cfn-signal
556
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
557
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
558
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
559
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
560
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
561
+ </filter>
562
+
563
+ <source>
564
+ @type systemd
565
+ path /mnt/log/journal
566
+ filters [{"_SYSTEMD_UNIT": "clean-ca-certificates.service"}]
567
+ <storage>
568
+ @type local
569
+ persistent true
570
+ path /mnt/pos/clean-ca-certificates.log.pos
571
+ </storage>
572
+ tag clean-ca-certificates
573
+ </source>
574
+
575
+ <filter clean-ca-certificates.**>
576
+ @type kubernetes_sumologic
577
+ source_category system
578
+ source_name clean-ca-certificates
579
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
580
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
581
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
582
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
583
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
584
+ </filter>
585
+
586
+ <source>
587
+ @type systemd
588
+ path /mnt/log/journal
589
+ filters [{"_SYSTEMD_UNIT": "containerd.service"}]
590
+ <storage>
591
+ @type local
592
+ persistent true
593
+ path /mnt/pos/containerd.log.pos
594
+ </storage>
595
+ tag containerd
596
+ </source>
597
+
598
+ <filter containerd.**>
599
+ @type kubernetes_sumologic
600
+ source_category system
601
+ source_name containerd
602
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
603
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
604
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
605
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
606
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
607
+ </filter>
608
+
609
+ <source>
610
+ @type systemd
611
+ path /mnt/log/journal
612
+ filters [{"_SYSTEMD_UNIT": "coreos-metadata.service"}]
613
+ <storage>
614
+ @type local
615
+ persistent true
616
+ path /mnt/pos/coreos-metadata.log.pos
617
+ </storage>
618
+ tag coreos-metadata
619
+ </source>
620
+
621
+ <filter coreos-metadata.**>
622
+ @type kubernetes_sumologic
623
+ source_category system
624
+ source_name coreos-metadata
625
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
626
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
627
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
628
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
629
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
630
+ </filter>
631
+
632
+ <source>
633
+ @type systemd
634
+ path /mnt/log/journal
635
+ filters [{"_SYSTEMD_UNIT": "coreos-setup-environment.service"}]
636
+ <storage>
637
+ @type local
638
+ persistent true
639
+ path /mnt/pos/coreos-setup-environment.log.pos
640
+ </storage>
641
+ tag coreos-setup-environment
642
+ </source>
643
+
644
+ <filter coreos-setup-environment.**>
645
+ @type kubernetes_sumologic
646
+ source_category system
647
+ source_name coreos-setup-environment
648
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
649
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
650
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
651
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
652
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
653
+ </filter>
654
+
655
+ <source>
656
+ @type systemd
657
+ path /mnt/log/journal
658
+ filters [{"_SYSTEMD_UNIT": "coreos-tmpfiles.service"}]
659
+ <storage>
660
+ @type local
661
+ persistent true
662
+ path /mnt/pos/coreos-tmpfiles.log.pos
663
+ </storage>
664
+ tag coreos-tmpfiles
665
+ </source>
666
+
667
+ <filter coreos-tmpfiles.**>
668
+ @type kubernetes_sumologic
669
+ source_category system
670
+ source_name coreos-tmpfiles
671
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
672
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
673
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
674
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
675
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
676
+ </filter>
677
+
678
+ <source>
679
+ @type systemd
680
+ path /mnt/log/journal
681
+ filters [{"_SYSTEMD_UNIT": "dbus.service"}]
682
+ <storage>
683
+ @type local
684
+ persistent true
685
+ path /mnt/pos/dbus.log.pos
686
+ </storage>
687
+ tag dbus
688
+ </source>
689
+
690
+ <filter dbus.**>
691
+ @type kubernetes_sumologic
692
+ source_category system
693
+ source_name dbus
694
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
695
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
696
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
697
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
698
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
699
+ </filter>
700
+
701
+ <source>
702
+ @type systemd
703
+ path /mnt/log/journal
704
+ filters [{"_SYSTEMD_UNIT": "docker.service"}]
705
+ <storage>
706
+ @type local
707
+ persistent true
708
+ path /mnt/pos/docker.log.pos
709
+ </storage>
710
+ tag docker
711
+ </source>
712
+
713
+ <filter docker.**>
714
+ @type kubernetes_sumologic
715
+ source_category system
716
+ source_name docker
717
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
718
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
719
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
720
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
721
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
722
+ </filter>
723
+
724
+ <source>
725
+ @type systemd
726
+ path /mnt/log/journal
727
+ filters [{"_SYSTEMD_UNIT": "efs.service"}]
728
+ <storage>
729
+ @type local
730
+ persistent true
731
+ path /mnt/pos/efs.log.pos
732
+ </storage>
733
+ tag efs
734
+ </source>
735
+
736
+ <filter efs.**>
737
+ @type kubernetes_sumologic
738
+ source_category system
739
+ source_name efs
740
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
741
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
742
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
743
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
744
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
745
+ </filter>
746
+
747
+ <source>
748
+ @type systemd
749
+ path /mnt/log/journal
750
+ filters [{"_SYSTEMD_UNIT": "etcd-member.service"}]
751
+ <storage>
752
+ @type local
753
+ persistent true
754
+ path /mnt/pos/etcd-member.log.pos
755
+ </storage>
756
+ tag etcd-member
757
+ </source>
758
+
759
+ <filter etcd-member.**>
760
+ @type kubernetes_sumologic
761
+ source_category system
762
+ source_name etcd-member
763
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
764
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
765
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
766
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
767
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
768
+ </filter>
769
+
770
+ <source>
771
+ @type systemd
772
+ path /mnt/log/journal
773
+ filters [{"_SYSTEMD_UNIT": "etcd.service"}]
774
+ <storage>
775
+ @type local
776
+ persistent true
777
+ path /mnt/pos/etcd.log.pos
778
+ </storage>
779
+ tag etcd
780
+ </source>
781
+
782
+ <filter etcd.**>
783
+ @type kubernetes_sumologic
784
+ source_category system
785
+ source_name etcd
786
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
787
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
788
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
789
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
790
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
791
+ </filter>
792
+
793
+ <source>
794
+ @type systemd
795
+ path /mnt/log/journal
796
+ filters [{"_SYSTEMD_UNIT": "etcd2.service"}]
797
+ <storage>
798
+ @type local
799
+ persistent true
800
+ path /mnt/pos/etcd2.log.pos
801
+ </storage>
802
+ tag etcd2
803
+ </source>
804
+
805
+ <filter etcd2.**>
806
+ @type kubernetes_sumologic
807
+ source_category system
808
+ source_name etcd2
809
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
810
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
811
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
812
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
813
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
814
+ </filter>
815
+
816
+ <source>
817
+ @type systemd
818
+ path /mnt/log/journal
819
+ filters [{"_SYSTEMD_UNIT": "etcd3.service"}]
820
+ <storage>
821
+ @type local
822
+ persistent true
823
+ path /mnt/pos/etcd3.log.pos
824
+ </storage>
825
+ tag etcd3
826
+ </source>
827
+
828
+ <filter etcd3.**>
829
+ @type kubernetes_sumologic
830
+ source_category system
831
+ source_name etcd3
832
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
833
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
834
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
835
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
836
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
837
+ </filter>
838
+
839
+ <source>
840
+ @type systemd
841
+ path /mnt/log/journal
842
+ filters [{"_SYSTEMD_UNIT": "etcdadm-check.service"}]
843
+ <storage>
844
+ @type local
845
+ persistent true
846
+ path /mnt/pos/etcdadm-check.log.pos
847
+ </storage>
848
+ tag etcdadm-check
849
+ </source>
850
+
851
+ <filter etcdadm-check.**>
852
+ @type kubernetes_sumologic
853
+ source_category system
854
+ source_name etcdadm-check
855
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
856
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
857
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
858
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
859
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
860
+ </filter>
861
+
862
+ <source>
863
+ @type systemd
864
+ path /mnt/log/journal
865
+ filters [{"_SYSTEMD_UNIT": "etcdadm-reconfigure.service"}]
866
+ <storage>
867
+ @type local
868
+ persistent true
869
+ path /mnt/pos/etcdadm-reconfigure.log.pos
870
+ </storage>
871
+ tag etcdadm-reconfigure
872
+ </source>
873
+
874
+ <filter etcdadm-reconfigure.**>
875
+ @type kubernetes_sumologic
876
+ source_category system
877
+ source_name etcdadm-reconfigure
878
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
879
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
880
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
881
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
882
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
883
+ </filter>
884
+
885
+ <source>
886
+ @type systemd
887
+ path /mnt/log/journal
888
+ filters [{"_SYSTEMD_UNIT": "etcdadm-save.service"}]
889
+ <storage>
890
+ @type local
891
+ persistent true
892
+ path /mnt/pos/etcdadm-save.log.pos
893
+ </storage>
894
+ tag etcdadm-save
895
+ </source>
896
+
897
+ <filter etcdadm-save.**>
898
+ @type kubernetes_sumologic
899
+ source_category system
900
+ source_name etcdadm-save
901
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
902
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
903
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
904
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
905
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
906
+ </filter>
907
+
908
+ <source>
909
+ @type systemd
910
+ path /mnt/log/journal
911
+ filters [{"_SYSTEMD_UNIT": "etcdadm-update-status.service"}]
912
+ <storage>
913
+ @type local
914
+ persistent true
915
+ path /mnt/pos/etcdadm-update-status.log.pos
916
+ </storage>
917
+ tag etcdadm-update-status
918
+ </source>
919
+
920
+ <filter etcdadm-update-status.**>
921
+ @type kubernetes_sumologic
922
+ source_category system
923
+ source_name etcdadm-update-status
924
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
925
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
926
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
927
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
928
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
929
+ </filter>
930
+
931
+ <source>
932
+ @type systemd
933
+ path /mnt/log/journal
934
+ filters [{"_SYSTEMD_UNIT": "flanneld.service"}]
935
+ <storage>
936
+ @type local
937
+ persistent true
938
+ path /mnt/pos/flanneld.log.pos
939
+ </storage>
940
+ tag flanneld
941
+ </source>
942
+
943
+ <filter flanneld.**>
944
+ @type kubernetes_sumologic
945
+ source_category system
946
+ source_name flanneld
947
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
948
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
949
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
950
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
951
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
952
+ </filter>
953
+
954
+ <source>
955
+ @type systemd
956
+ path /mnt/log/journal
957
+ filters [{"_SYSTEMD_UNIT": "format-etcd2-volume.service"}]
958
+ <storage>
959
+ @type local
960
+ persistent true
961
+ path /mnt/pos/format-etcd2-volume.log.pos
962
+ </storage>
963
+ tag format-etcd2-volume
964
+ </source>
965
+
966
+ <filter format-etcd2-volume.**>
967
+ @type kubernetes_sumologic
968
+ source_category system
969
+ source_name format-etcd2-volume
970
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
971
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
972
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
973
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
974
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
975
+ </filter>
976
+
977
+ <source>
978
+ @type systemd
979
+ path /mnt/log/journal
980
+ filters [{"_SYSTEMD_UNIT": "kube-node-taint-and-uncordon.service"}]
981
+ <storage>
982
+ @type local
983
+ persistent true
984
+ path /mnt/pos/kube-node-taint-and-uncordon.log.pos
985
+ </storage>
986
+ tag kube-node-taint-and-uncordon
987
+ </source>
988
+
989
+ <filter kube-node-taint-and-uncordon.**>
990
+ @type kubernetes_sumologic
991
+ source_category system
992
+ source_name kube-node-taint-and-uncordon
993
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
994
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
995
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
996
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
997
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
998
+ </filter>
999
+
1000
+ # Multi-line parsing is required for all the kube logs because very large log
1001
+ # statements, such as those that include entire object bodies, get split into
1002
+ # multiple lines by glog.
1003
+
1004
+ # Example:
1005
+ # I0204 07:32:30.020537 3368 server.go:1048] POST /stats/container/: (13.972191ms) 200 [[Go-http-client/1.1] 10.244.1.3:40537]
1006
+ <source>
1007
+ @type systemd
1008
+ path /mnt/log/journal
1009
+ filters [{"_SYSTEMD_UNIT": "kubelet.service"}]
1010
+ <storage>
1011
+ @type local
1012
+ persistent true
1013
+ path /mnt/pos/kubelet.log.pos
1014
+ </storage>
1015
+ tag kubelet
1016
+ </source>
1017
+
1018
+ <filter kubelet.**>
1019
+ @type kubernetes_sumologic
1020
+ source_category kubelet
1021
+ source_name k8s_kubelet
1022
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1023
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1024
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1025
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1026
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1027
+ </filter>
1028
+
1029
+ <source>
1030
+ @type systemd
1031
+ path /mnt/log/journal
1032
+ filters [{"_SYSTEMD_UNIT": "ldconfig.service"}]
1033
+ <storage>
1034
+ @type local
1035
+ persistent true
1036
+ path /mnt/pos/ldconfig.log.pos
1037
+ </storage>
1038
+ tag ldconfig
1039
+ </source>
1040
+
1041
+ <filter ldconfig.**>
1042
+ @type kubernetes_sumologic
1043
+ source_category system
1044
+ source_name ldconfig
1045
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1046
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1047
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1048
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1049
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1050
+ </filter>
1051
+
1052
+ <source>
1053
+ @type systemd
1054
+ path /mnt/log/journal
1055
+ filters [{"_SYSTEMD_UNIT": "locksmithd.service"}]
1056
+ <storage>
1057
+ @type local
1058
+ persistent true
1059
+ path /mnt/pos/locksmithd.log.pos
1060
+ </storage>
1061
+ tag locksmithd
1062
+ </source>
1063
+
1064
+ <filter locksmithd.**>
1065
+ @type kubernetes_sumologic
1066
+ source_category system
1067
+ source_name locksmithd
1068
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1069
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1070
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1071
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1072
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1073
+ </filter>
1074
+
1075
+ <source>
1076
+ @type systemd
1077
+ path /mnt/log/journal
1078
+ filters [{"_SYSTEMD_UNIT": "logrotate.service"}]
1079
+ <storage>
1080
+ @type local
1081
+ persistent true
1082
+ path /mnt/pos/logrotate.log.pos
1083
+ </storage>
1084
+ tag logrotate
1085
+ </source>
1086
+
1087
+ <filter logrotate.**>
1088
+ @type kubernetes_sumologic
1089
+ source_category system
1090
+ source_name logrotate
1091
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1092
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1093
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1094
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1095
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1096
+ </filter>
1097
+
1098
+ <source>
1099
+ @type systemd
1100
+ path /mnt/log/journal
1101
+ filters [{"_SYSTEMD_UNIT": "lvm2-monitor.service"}]
1102
+ <storage>
1103
+ @type local
1104
+ persistent true
1105
+ path /mnt/pos/lvm2-monitor.log.pos
1106
+ </storage>
1107
+ tag lvm2-monitor
1108
+ </source>
1109
+
1110
+ <filter lvm2-monitor.**>
1111
+ @type kubernetes_sumologic
1112
+ source_category system
1113
+ source_name lvm2-monitor
1114
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1115
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1116
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1117
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1118
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1119
+ </filter>
1120
+
1121
+ <source>
1122
+ @type systemd
1123
+ path /mnt/log/journal
1124
+ filters [{"_SYSTEMD_UNIT": "mdmon.service"}]
1125
+ <storage>
1126
+ @type local
1127
+ persistent true
1128
+ path /mnt/pos/mdmon.log.pos
1129
+ </storage>
1130
+ tag mdmon
1131
+ </source>
1132
+
1133
+ <filter mdmon.**>
1134
+ @type kubernetes_sumologic
1135
+ source_category system
1136
+ source_name mdmon
1137
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1138
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1139
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1140
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1141
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1142
+ </filter>
1143
+
1144
+ <source>
1145
+ @type systemd
1146
+ path /mnt/log/journal
1147
+ filters [{"_SYSTEMD_UNIT": "nfs-idmapd.service"}]
1148
+ <storage>
1149
+ @type local
1150
+ persistent true
1151
+ path /mnt/pos/nfs-idmapd.log.pos
1152
+ </storage>
1153
+ tag nfs-idmapd
1154
+ </source>
1155
+
1156
+ <filter nfs-idmapd.**>
1157
+ @type kubernetes_sumologic
1158
+ source_category system
1159
+ source_name nfs-idmapd
1160
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1161
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1162
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1163
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1164
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1165
+ </filter>
1166
+
1167
+ <source>
1168
+ @type systemd
1169
+ path /mnt/log/journal
1170
+ filters [{"_SYSTEMD_UNIT": "nfs-mountd.service"}]
1171
+ <storage>
1172
+ @type local
1173
+ persistent true
1174
+ path /mnt/pos/nfs-mountd.log.pos
1175
+ </storage>
1176
+ tag nfs-mountd
1177
+ </source>
1178
+
1179
+ <filter nfs-mountd.**>
1180
+ @type kubernetes_sumologic
1181
+ source_category system
1182
+ source_name nfs-mountd
1183
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1184
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1185
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1186
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1187
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1188
+ </filter>
1189
+
1190
+ <source>
1191
+ @type systemd
1192
+ path /mnt/log/journal
1193
+ filters [{"_SYSTEMD_UNIT": "nfs-server.service"}]
1194
+ <storage>
1195
+ @type local
1196
+ persistent true
1197
+ path /mnt/pos/nfs-server.log.pos
1198
+ </storage>
1199
+ tag nfs-server
1200
+ </source>
1201
+
1202
+ <filter nfs-server.**>
1203
+ @type kubernetes_sumologic
1204
+ source_category system
1205
+ source_name nfs-server
1206
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1207
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1208
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1209
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1210
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1211
+ </filter>
1212
+
1213
+ <source>
1214
+ @type systemd
1215
+ path /mnt/log/journal
1216
+ filters [{"_SYSTEMD_UNIT": "nfs-utils.service"}]
1217
+ <storage>
1218
+ @type local
1219
+ persistent true
1220
+ path /mnt/pos/nfs-utils.log.pos
1221
+ </storage>
1222
+ tag nfs-utils
1223
+ </source>
1224
+
1225
+ <filter nfs-utils.**>
1226
+ @type kubernetes_sumologic
1227
+ source_category system
1228
+ source_name nfs-utils
1229
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1230
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1231
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1232
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1233
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1234
+ </filter>
1235
+
1236
+ <source>
1237
+ @type systemd
1238
+ path /mnt/log/journal
1239
+ filters [{"_SYSTEMD_UNIT": "oem-cloudinit.service"}]
1240
+ <storage>
1241
+ @type local
1242
+ persistent true
1243
+ path /mnt/pos/oem-cloudinit.log.pos
1244
+ </storage>
1245
+ tag oem-cloudinit
1246
+ </source>
1247
+
1248
+ <filter oem-cloudinit.**>
1249
+ @type kubernetes_sumologic
1250
+ source_category system
1251
+ source_name oem-cloudinit
1252
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1253
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1254
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1255
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1256
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1257
+ </filter>
1258
+
1259
+ <source>
1260
+ @type systemd
1261
+ path /mnt/log/journal
1262
+ filters [{"_SYSTEMD_UNIT": "rkt-gc.service"}]
1263
+ <storage>
1264
+ @type local
1265
+ persistent true
1266
+ path /mnt/pos/rkt-gc.log.pos
1267
+ </storage>
1268
+ tag rkt-gc
1269
+ </source>
1270
+
1271
+ <filter rkt-gc.**>
1272
+ @type kubernetes_sumologic
1273
+ source_category system
1274
+ source_name rkt-gc
1275
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1276
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1277
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1278
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1279
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1280
+ </filter>
1281
+
1282
+ <source>
1283
+ @type systemd
1284
+ path /mnt/log/journal
1285
+ filters [{"_SYSTEMD_UNIT": "rkt-metadata.service"}]
1286
+ <storage>
1287
+ @type local
1288
+ persistent true
1289
+ path /mnt/pos/rkt-metadata.log.pos
1290
+ </storage>
1291
+ tag rkt-metadata
1292
+ </source>
1293
+
1294
+ <filter rkt-metadata.**>
1295
+ @type kubernetes_sumologic
1296
+ source_category system
1297
+ source_name rkt-metadata
1298
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1299
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1300
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1301
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1302
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1303
+ </filter>
1304
+
1305
+ <source>
1306
+ @type systemd
1307
+ path /mnt/log/journal
1308
+ filters [{"_SYSTEMD_UNIT": "rpc-idmapd.service"}]
1309
+ <storage>
1310
+ @type local
1311
+ persistent true
1312
+ path /mnt/pos/rpc-idmapd.log.pos
1313
+ </storage>
1314
+ tag rpc-idmapd
1315
+ </source>
1316
+
1317
+ <filter rpc-idmapd.**>
1318
+ @type kubernetes_sumologic
1319
+ source_category system
1320
+ source_name rpc-idmapd
1321
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1322
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1323
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1324
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1325
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1326
+ </filter>
1327
+
1328
+ <source>
1329
+ @type systemd
1330
+ path /mnt/log/journal
1331
+ filters [{"_SYSTEMD_UNIT": "rpc-mountd.service"}]
1332
+ <storage>
1333
+ @type local
1334
+ persistent true
1335
+ path /mnt/pos/rpc-mountd.log.pos
1336
+ </storage>
1337
+ tag rpc-mountd
1338
+ </source>
1339
+
1340
+ <filter rpc-mountd.**>
1341
+ @type kubernetes_sumologic
1342
+ source_category system
1343
+ source_name rpc-mountd
1344
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1345
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1346
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1347
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1348
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1349
+ </filter>
1350
+
1351
+ <source>
1352
+ @type systemd
1353
+ path /mnt/log/journal
1354
+ filters [{"_SYSTEMD_UNIT": "rpc-statd.service"}]
1355
+ <storage>
1356
+ @type local
1357
+ persistent true
1358
+ path /mnt/pos/rpc-statd.log.pos
1359
+ </storage>
1360
+ tag rpc-statd
1361
+ </source>
1362
+
1363
+ <filter rpc-statd.**>
1364
+ @type kubernetes_sumologic
1365
+ source_category system
1366
+ source_name rpc-statd
1367
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1368
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1369
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1370
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1371
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1372
+ </filter>
1373
+
1374
+ <source>
1375
+ @type systemd
1376
+ path /mnt/log/journal
1377
+ filters [{"_SYSTEMD_UNIT": "rpcbind.service"}]
1378
+ <storage>
1379
+ @type local
1380
+ persistent true
1381
+ path /mnt/pos/rpcbind.log.pos
1382
+ </storage>
1383
+ tag rpcbind
1384
+ </source>
1385
+
1386
+ <filter rpcbind.**>
1387
+ @type kubernetes_sumologic
1388
+ source_category system
1389
+ source_name rpcbind
1390
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1391
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1392
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1393
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1394
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1395
+ </filter>
1396
+
1397
+ <source>
1398
+ @type systemd
1399
+ path /mnt/log/journal
1400
+ filters [{"_SYSTEMD_UNIT": "set-aws-environment.service"}]
1401
+ <storage>
1402
+ @type local
1403
+ persistent true
1404
+ path /mnt/pos/set-aws-environment.log.pos
1405
+ </storage>
1406
+ tag set-aws-environment
1407
+ </source>
1408
+
1409
+ <filter set-aws-environment.**>
1410
+ @type kubernetes_sumologic
1411
+ source_category system
1412
+ source_name set-aws-environment
1413
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1414
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1415
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1416
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1417
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1418
+ </filter>
1419
+
1420
+ <source>
1421
+ @type systemd
1422
+ path /mnt/log/journal
1423
+ filters [{"_SYSTEMD_UNIT": "system-cloudinit.service"}]
1424
+ <storage>
1425
+ @type local
1426
+ persistent true
1427
+ path /mnt/pos/system-cloudinit.log.pos
1428
+ </storage>
1429
+ tag system-cloudinit
1430
+ </source>
1431
+
1432
+ <filter system-cloudinit.**>
1433
+ @type kubernetes_sumologic
1434
+ source_category system
1435
+ source_name system-cloudinit
1436
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1437
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1438
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1439
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1440
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1441
+ </filter>
1442
+
1443
+ <source>
1444
+ @type systemd
1445
+ path /mnt/log/journal
1446
+ filters [{"_SYSTEMD_UNIT": "update-ca-certificates.service"}]
1447
+ <storage>
1448
+ @type local
1449
+ persistent true
1450
+ path /mnt/pos/update-ca-certificates.log.pos
1451
+ </storage>
1452
+ tag update-ca-certificates
1453
+ </source>
1454
+
1455
+ <filter update-ca-certificates.**>
1456
+ @type kubernetes_sumologic
1457
+ source_category system
1458
+ source_name update-ca-certificates
1459
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1460
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1461
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1462
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1463
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1464
+ </filter>
1465
+
1466
+ <source>
1467
+ @type systemd
1468
+ path /mnt/log/journal
1469
+ filters [{"_SYSTEMD_UNIT": "user-cloudinit.service"}]
1470
+ <storage>
1471
+ @type local
1472
+ persistent true
1473
+ path /mnt/pos/user-cloudinit.log.pos
1474
+ </storage>
1475
+ tag user-cloudinit
1476
+ </source>
1477
+
1478
+ <filter user-cloudinit.**>
1479
+ @type kubernetes_sumologic
1480
+ source_category system
1481
+ source_name user-cloudinit
1482
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1483
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1484
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1485
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1486
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1487
+ </filter>
1488
+
1489
+ <source>
1490
+ @type systemd
1491
+ path /mnt/log/journal
1492
+ filters [{"_SYSTEMD_UNIT": "var-lib-etcd2.service"}]
1493
+ <storage>
1494
+ @type local
1495
+ persistent true
1496
+ path /mnt/pos/var-lib-etcd2.log.pos
1497
+ </storage>
1498
+ tag var-lib-etcd2
1499
+ </source>
1500
+
1501
+ <filter var-lib-etcd2.**>
1502
+ @type kubernetes_sumologic
1503
+ source_category system
1504
+ source_name var-lib-etcd2
1505
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1506
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1507
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1508
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1509
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1510
+ </filter>
1511
+
1512
+ <source>
1513
+ @type systemd
1514
+ path /mnt/log/journal
1515
+ filters [{"_SYSTEMD_UNIT": "ntp.service"}]
1516
+ <storage>
1517
+ @type local
1518
+ persistent true
1519
+ path /mnt/pos/ntp.log.pos
1520
+ </storage>
1521
+ tag ntp
1522
+ </source>
1523
+
1524
+ <filter ntp.**>
1525
+ @type kubernetes_sumologic
1526
+ source_category system
1527
+ source_name ntp
1528
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1529
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1530
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1531
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1532
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1533
+ </filter>
1534
+
1535
+ <source>
1536
+ @type systemd
1537
+ path /mnt/log/journal
1538
+ filters [{"_SYSTEMD_UNIT": "systemd-timesyncd.service"}]
1539
+ <storage>
1540
+ @type local
1541
+ persistent true
1542
+ path /mnt/pos/systemd-timesyncd.log.pos
1543
+ </storage>
1544
+ tag systemd-timesyncd
1545
+ </source>
1546
+
1547
+ <filter systemd-timesyncd.**>
1548
+ @type kubernetes_sumologic
1549
+ source_category system
1550
+ source_name systemd-timesyncd
1551
+ source_category_prefix "#{ENV['SOURCE_CATEGORY_PREFIX']}"
1552
+ exclude_facility_regex "#{ENV['EXCLUDE_FACILITY_REGEX']}"
1553
+ exclude_host_regex "#{ENV['EXCLUDE_HOST_REGEX']}"
1554
+ exclude_priority_regex "#{ENV['EXCLUDE_PRIORITY_REGEX']}"
1555
+ exclude_unit_regex "#{ENV['EXCLUDE_UNIT_REGEX']}"
1556
+ </filter>