k8sConfigs/efk/fluentd-configMap2.yaml

apiVersion: v1
kind: ConfigMap
metadata:
  name: fluentd-config
  namespace: efk
data:
  fluent.conf: |
    <source>
      @type http
      @id input_http
      port 8888
      @label @main
    </source>

    <label @main>
      <match sardine.log.**>
        @type copy
        <store>
          @type elasticsearch
          @id output_elasticsearch
          host elasticsearch
          port 9200
          scheme http
          user fluentd_user
          password fluentd_password
          logstash_format true
          logstash_prefix logstash
          logstash_dateformat %Y.%m.%d
          flush_interval 5s
          @log_level debug
          id_key _id
          remove_keys _id
        </store>
        <store>
          @type stdout
          @id output_stdout
        </store>
      </match>

      <match tanya.**>
        @type rewrite_tag_filter
        @id rewrite_tag_for_tanya
        <rule>
          key @log_name
          pattern ^tanya\.candle\.([^\.]+)\.([^\.]+)\.([^\.]+)$
          tag candle.$1.$2.$3
        </rule>
      </match>

      <match candle.**>
        @type copy
        <store>
          @type elasticsearch
          @id output_elasticsearch_tanya
          host elasticsearch
          port 9200
          scheme http
          user fluentd_user
          password fluentd_password
          index_name candle_${tag_parts[1]}_${tag_parts[2]}_${tag_parts[3]}
          flush_interval 5s
          @log_level debug
          id_key _id
          remove_keys _id
          include_tag_key true
          tag_key @log_name
        </store>
        <store>
          @type stdout
          @id output_stdout_tanya
        </store>
      </match>
    </label>

    <match **>
      @type stdout
      @id output_stdout_all
    </match>