Issue with Fluentbit sending my app docker container Logs to ELK

37 Views Asked by At

I want to parse and send below JSON Logs to ELK

[2023-12-05 11:24:35.281] INFO  JsonLogger [[MuleRuntime].uber.8614: [rtf-eks-vali-dev].post:\notification:api-config.BLOCKING @32b79a38] [event: de6ad1b0-9360-11ee-9395-8e6b4b575608]: {
  "correlationId" : "de6ad1b0-9360-11ee-9395-8e6b4b575608",
  "message" : "This is O/P from JSON Logger",
  "tracePoint" : "EVENT",
  "priority" : "INFO",
  "elapsed" : 0,
  "locationInfo" : {
    "lineInFile" : "138",
    "component" : "json-logger:logger",
    "fileName" : "api-routes.xml",
    "rootContainer" : "post:\\notification:api-config"
  },
  "timestamp" : "2023-12-05T11:24:35.281Z",
  "applicationName" : "cn-memory-check-sys",
  "applicationVersion" : "1.0.0-SNAPSHOT",
  "environment" : "dev",
  "threadName" : "[MuleRuntime].uber.8614: [rtf-eks-vali-dev].post:\\notification:api-config.BLOCKING @32b79a38",
  "metadata" : {
    "User-Agent" : "PostmanRuntime/7.35.0",
    "Host" : "dev-cn1-apis.com.cn",
    "Content-Length" : "227",
    "Content-Type" : "text/plain"
  }
}

2022-07-25T06:43:17.20958947Z stdout F kind of line is getting appended before each json element such as correlationId,message,etc.

How to get rid of docker appended lines?

I tried different multiline and custom parsers and filters but none of them worked.

0

There are 0 best solutions below