Fluentular

a Fluentd regular expression editor

Configuration

Copy and paste to fluent.conf or td-agent.conf

<source>
  type tail
  path /var/log/foo/bar.log
  pos_file /var/log/td-agent/foo-bar.log.pos
  tag foo.bar
  format /^(?<date>[^\]]*) (?<host>[^ ]*)/
  time_format %d/%b/%Y:%H:%M:%S
</source>

Data Inspector

Attributes

Key Value
time 2024/03/29 07:30:15 +0000

Records

Key Value
date 21/Jun/2014:03:05:43
host aaaa