378 questions
0
votes
0
answers
24
views
How to configure Fluent Bit's azure_logs_ingestion output to send logs to Azure Log Analytics' Basic tables?
I am deploying FluentBit on an Azure Kubernetes Service cluster, aiming to collect logs per namespace. The deployment is via Terragrunt, Terraform and HELM. Currently I am able to deliver with OUTPUT &...
- 1,236
0
votes
0
answers
54
views
Why does Fluent Bit re-read a rotated log file even when the inode remains the same?
I'm using Fluent Bit v4.1.1 with the tail input plugin to collect application logs written by Logback.
Log rotation works as follows:
test.log → renamed to test.2025-11-08.0.log
A new test.log is ...
- 11
1
vote
0
answers
38
views
Fluent Bit v4.1.1 – ${tag[1]} variable not set when dynamically naming OpenSearch index
Issue:
I’m using Fluent Bit v4.1.1 to send Docker container logs to OpenSearch.
I want to dynamically extract the project name (e.g., test-project) from the log file path /logs/test-project/... using ...
- 11
0
votes
0
answers
59
views
Can fluentbit write or pub to redis on output?
I'd like to ingest server access logs via Fluentbit and then do some modification using the filters and output the results to Redis. All on the same server.
Is there a Redis output plugin or would ...
- 2,573
0
votes
0
answers
68
views
How to filter out the timestamp from cri-o logs?
I'm trying to setup multiline log parser in fluentbit. But I'm currently encountered a problem with parsing. Can anyone help me?
I'm deploying Fluent Bit in Kubernetes and pipe the logs to Loki and ...
- 69
0
votes
1
answer
302
views
Fluentbit sends duplicate logs to its destination when the log file is recreated
I'm working on a task where I need to send AWS ECS EC2 logs to opensearch. For ECS service logs I've created Fluentbit daemon service which helps in sending service logs to opensearch via firehose.
...
1
vote
0
answers
27
views
Elasticsearch does not recognize custom timestamp
In log collector fluent-bit, I define a custom timestamp key pw_tmstp in Parsers.conf file like this:
[PARSER]
Name pw_tmstp
Format regex
Regex (?<pw_time>\d{4}-\d{2}-\d{2}\s\d{2}:\d{2}:\d{...
- 617
-1
votes
1
answer
120
views
Fluentbit does not read any logs
I am running into a weird issue of Fluentbit not reading logs from a folder.
Setup details:
Kong is running as podman container and is writing logs to a local folder mounted as a volume.
Fluent bit is ...
- 127
1
vote
1
answer
112
views
How to configure Fluentbit file buffering
I'm using Fluent Bit on Windows, and I'm trying to enable file buffering for reliability when my central syslog server is temporarily unavailable.
Here’s my configuration:
[SERVICE]
storage.path ...
- 11
0
votes
0
answers
50
views
Cannont add dynamic volume with lua and fluentbit
I’m encountering an issue with routing logs into multiple namespaces using Fluent Bit. I’ve written a Lua filter to generate dynamic file paths:
function cb_map_tag(tag, ts, record)
local ns = (...
1
vote
0
answers
288
views
How do I parse CRI/JSON-formatted logs using Fluent-Bit
I am running Fluent Bit v3.2.10, which I am using to parse logs from .NET Containers in a locally running Kubernetes Cluster.
My .NET Containers returns logs formatted as JSON using an ESC-formatter. ...
- 11
0
votes
1
answer
119
views
Parsing JSON array in Fluent-Bit
I am able to parse JSON like string that looks something like this:
{"response":"{\"key1\": \"12345\", \"key2\": \"abc\", \"time\": \&...
- 1
1
vote
3
answers
138
views
EKS Fargate: How to disable container logs to CloudWatch?
We are running our app on EKS Fargate. As per the AWS documentation we can disable the Fluenbit process logs to Cloudwatch by setting flb_log_cw: "false" in the ConfigMap.
But do you know ...
- 139
0
votes
0
answers
25
views
Issue with Fluentbit Image supporting linux ppc64le arch with kafka plugin
We are having linux ppc64le arch servers. As Fluentbit doesn't support ppc64le arch as per documentation, we are trying to build a multiarch support custom fluent-bit image with kafka plugin. Facing ...
0
votes
0
answers
66
views
Empty Jaeger UI service when sending OTLP traces from fluentBit
I have several Python servers, and I need to capture all the latencies occured during various functions calls. I am using OpenTelemetry for this purpose. The project architecture: Python -> stdout -...
- 3