Using systemd entry in record_modifier

fluent-plugins-nursery / fluent-plugin-systemd

This is a fluentd input plugin. It reads logs from the systemd journal.

Apache License 2.0

153 stars 43 forks source link

Open diversario opened 1 year ago

diversario commented 1 year ago

I'm not sure I'm phrasing my question correctly, but the idea of what I'm trying to achieve is this:

<filter systemd.**>
  @type record_modifier
  <record>
    service $NameOfASystemdServiceFromTheEntry
  </record>
</filter>

so service key would docker.service or ntp.service or whatever service actually produced the log entry. Is this possible?