2025-04-14 00:24:37 +0000 [info]: init supervisor logger path=nil rotate_age=nil rotate_size=nil
2025-04-14 00:24:37 +0000 [info]: parsing config file is succeeded path="/etc/td-agent/td-agent.conf"
2025-04-14 00:24:37 +0000 [info]: gem 'fluent-plugin-calyptia-monitoring' version '0.1.3'
2025-04-14 00:24:37 +0000 [info]: gem 'fluent-plugin-elasticsearch' version '5.2.5'
2025-04-14 00:24:37 +0000 [info]: gem 'fluent-plugin-elasticsearch' version '5.2.4'
2025-04-14 00:24:37 +0000 [info]: gem 'fluent-plugin-flowcounter-simple' version '0.1.0'
2025-04-14 00:24:37 +0000 [info]: gem 'fluent-plugin-grok-parser' version '2.6.2'
2025-04-14 00:24:37 +0000 [info]: gem 'fluent-plugin-kafka' version '0.18.1'
2025-04-14 00:24:37 +0000 [info]: gem 'fluent-plugin-metrics-cmetrics' version '0.1.2'
2025-04-14 00:24:37 +0000 [info]: gem 'fluent-plugin-opensearch' version '1.0.8'
2025-04-14 00:24:37 +0000 [info]: gem 'fluent-plugin-prometheus' version '2.1.0'
2025-04-14 00:24:37 +0000 [info]: gem 'fluent-plugin-prometheus' version '2.0.3'
2025-04-14 00:24:37 +0000 [info]: gem 'fluent-plugin-prometheus_pushgateway' version '0.1.0'
2025-04-14 00:24:37 +0000 [info]: gem 'fluent-plugin-record-modifier' version '2.1.1'
2025-04-14 00:24:37 +0000 [info]: gem 'fluent-plugin-rewrite-tag-filter' version '2.4.0'
2025-04-14 00:24:37 +0000 [info]: gem 'fluent-plugin-s3' version '1.7.2'
2025-04-14 00:24:37 +0000 [info]: gem 'fluent-plugin-sd-dns' version '0.1.0'
2025-04-14 00:24:37 +0000 [info]: gem 'fluent-plugin-systemd' version '1.0.5'
2025-04-14 00:24:37 +0000 [info]: gem 'fluent-plugin-td' version '1.2.0'
2025-04-14 00:24:37 +0000 [info]: gem 'fluent-plugin-utmpx' version '0.5.0'
2025-04-14 00:24:37 +0000 [info]: gem 'fluent-plugin-webhdfs' version '1.5.0'
2025-04-14 00:24:37 +0000 [info]: gem 'fluentd' version '1.15.3'
2025-04-14 00:24:37 +0000 [info]: gem 'fluentd' version '0.12.43'
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c491a8 @keys="programname">, /^(cinder-api-access|cloudkitty-api-access|gnocchi-api-access|horizon-access|keystone-apache-admin-access|keystone-apache-public-access|monasca-api-access|octavia-api-access|placement-api-access)$/, "", "apache_access", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c48a78 @keys="programname">, /^(aodh_wsgi_access|barbican_api_uwsgi_access|zun_api_wsgi_access|vitrage_wsgi_access)$/, "", "wsgi_access", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c4a5d0 @keys="programname">, /^(nova-api|nova-compute|nova-compute-ironic|nova-conductor|nova-manage|nova-novncproxy|nova-scheduler|nova-placement-api|placement-api|privsep-helper)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c3b440 @keys="programname">, /^(sahara-api|sahara-engine)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c3a9a0 @keys="programname">, /^(neutron-server|neutron-openvswitch-agent|neutron-ns-metadata-proxy|neutron-metadata-agent|neutron-l3-agent|neutron-dhcp-agent)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c3a220 @keys="programname">, /^(magnum-conductor|magnum-api)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c395a0 @keys="programname">, /^(keystone)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c38d30 @keys="programname">, /^(heat-engine|heat-api|heat-api-cfn)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c38628 @keys="programname">, /^(glance-api)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c338a8 @keys="programname">, /^(cloudkitty-storage-init|cloudkitty-processor|cloudkitty-dbsync|cloudkitty-api)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c32cf0 @keys="programname">, /^(ceilometer-polling|ceilometer-agent-notification)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c32138 @keys="programname">, /^(barbican-api|barbican-worker|barbican-keystone-listener|barbican-db-manage|app)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c31670 @keys="programname">, /^(aodh-notifier|aodh-listener|aodh-evaluator|aodh-dbsync)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c30d88 @keys="programname">, /^(cyborg-api|cyborg-conductor|cyborg-agent)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c306a8 @keys="programname">, /^(cinder-api|cinder-scheduler|cinder-manage|cinder-volume|cinder-backup|privsep-helper)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c30018 @keys="programname">, /^(mistral-server|mistral-engine|mistral-executor)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c23700 @keys="programname">, /^(designate-api|designate-central|designate-manage|designate-mdns|designate-sink|designate-worker)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c22c38 @keys="programname">, /^(manila-api|manila-data|manila-manage|manila-share|manila-scheduler)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c22030 @keys="programname">, /^(trove-api|trove-conductor|trove-manage|trove-taskmanager)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c21630 @keys="programname">, /^(murano-api|murano-engine)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c20ac8 @keys="programname">, /^(senlin-api|senlin-conductor|senlin-engine|senlin-health-manager)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c202d0 @keys="programname">, /^(watcher-api|watcher-applier|watcher-db-manage|watcher-decision-engine)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c17a18 @keys="programname">, /^(freezer-api|freezer-api_access|freezer-manage)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c171d0 @keys="programname">, /^(octavia-api|octavia-health-manager|octavia-housekeeping|octavia-worker)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c163e8 @keys="programname">, /^(zun-api|zun-compute|zun-cni-daemon)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c15ad8 @keys="programname">, /^(kuryr-server)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c150b0 @keys="programname">, /^(gnocchi-api|gnocchi-statsd|gnocchi-metricd|gnocchi-upgrade)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001c147f0 @keys="programname">, /^(ironic-api|ironic-conductor|ironic-inspector)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001bffdc8 @keys="programname">, /^(tacker-server|tacker-conductor)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001bfee50 @keys="programname">, /^(vitrage-ml|vitrage-notifier|vitrage-graph|vitrage-persistor)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001bfe450 @keys="programname">, /^(blazar-api|blazar-manager)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001bfdcd0 @keys="programname">, /^(monasca-api|monasca-notification|monasca-persister|agent-collector|agent-forwarder|agent-statsd)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001bfd5c8 @keys="programname">, /^(masakari-engine|masakari-api)$/, "", "openstack_python", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000001bfc8f8 @keys="programname">, /.+/, "", "unmatched", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: Payload [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x000000000129e310 @keys="Payload">, /^\d{6}/, "", "infra.mariadb.mysqld_safe", nil]
2025-04-14 00:24:37 +0000 [info]: adding rewrite_tag_filter rule: Payload [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x000000000129c290 @keys="Payload">, /^\d{4}-\d{2}-\d{2}/, "", "infra.mariadb.mysqld", nil]
2025-04-14 00:24:37 +0000 [info]: Expanded the pattern \[%{HTTPDATE:Timestamp}\] "(?:%{WORD:http_method} %{NOTSPACE:http_url}(?: HTTP/%{NUMBER:http_version})?|%{DATA:rawrequest})" %{NUMBER:http_status} (?:%{NUMBER:http_bytes}|-) (?:%{NUMBER:http_response_time_us}|-) "%{DATA:referrer}" "%{DATA:agent}" into \[(?<Timestamp>(?:(?:(?:0[1-9])|(?:[12][0-9])|(?:3[01])|[1-9]))/(?:\b(?:[Jj]an(?:uary|uar)?|[Ff]eb(?:ruary|ruar)?|[Mm](?:a|ä)?r(?:ch|z)?|[Aa]pr(?:il)?|[Mm]a(?:y|i)?|[Jj]un(?:e|i)?|[Jj]ul(?:y|i)?|[Aa]ug(?:ust)?|[Ss]ep(?:tember)?|[Oo](?:c|k)?t(?:ober)?|[Nn]ov(?:ember)?|[Dd]e(?:c|z)(?:ember)?)\b)/(?:(?>\d\d){1,2}):(?:(?!<[0-9])(?:(?:2[0123]|[01]?[0-9])):(?:(?:[0-5][0-9]))(?::(?:(?:(?:[0-5]?[0-9]|60)(?:[:.,][0-9]+)?)))(?![0-9])) (?:(?:[+-]?(?:[0-9]+))))\] "(?:(?<http_method>\b\w+\b) (?<http_url>\S+)(?: HTTP/(?<http_version>(?:(?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\.[0-9]+)?)|(?:\.[0-9]+)))))))?|(?<rawrequest>.*?))" (?<http_status>(?:(?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\.[0-9]+)?)|(?:\.[0-9]+)))))) (?:(?<http_bytes>(?:(?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\.[0-9]+)?)|(?:\.[0-9]+))))))|-) (?:(?<http_response_time_us>(?:(?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\.[0-9]+)?)|(?:\.[0-9]+))))))|-) "(?<referrer>.*?)" "(?<agent>.*?)"
2025-04-14 00:24:37 +0000 [info]: Expanded the pattern %{IPORHOST:clientip} %{HTTPDUSER:ident} %{USER:auth} \[%{HTTPDATE:Timestamp}\] "(?:%{WORD:http_method} %{NOTSPACE:http_url}(?: HTTP/%{NUMBER:http_version})?|%{DATA:rawrequest})" %{NUMBER:http_status} (?:%{NUMBER:http_bytes}|-) (?:%{NUMBER:http_response_time_us}|-) %{QS:referrer} %{QS:agent} into (?<clientip>(?:(?:(?:(?:((([0-9A-Fa-f]{1,4}:){7}([0-9A-Fa-f]{1,4}|:))|(([0-9A-Fa-f]{1,4}:){6}(:[0-9A-Fa-f]{1,4}|((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9A-Fa-f]{1,4}:){5}(((:[0-9A-Fa-f]{1,4}){1,2})|:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9A-Fa-f]{1,4}:){4}(((:[0-9A-Fa-f]{1,4}){1,3})|((:[0-9A-Fa-f]{1,4})?:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){3}(((:[0-9A-Fa-f]{1,4}){1,4})|((:[0-9A-Fa-f]{1,4}){0,2}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){2}(((:[0-9A-Fa-f]{1,4}){1,5})|((:[0-9A-Fa-f]{1,4}){0,3}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){1}(((:[0-9A-Fa-f]{1,4}){1,6})|((:[0-9A-Fa-f]{1,4}){0,4}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(:(((:[0-9A-Fa-f]{1,4}){1,7})|((:[0-9A-Fa-f]{1,4}){0,5}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:)))(%.+)?)|(?:(?<![0-9])(?:(?:[0-1]?[0-9]{1,2}|2[0-4][0-9]|25[0-5])[.](?:[0-1]?[0-9]{1,2}|2[0-4][0-9]|25[0-5])[.](?:[0-1]?[0-9]{1,2}|2[0-4][0-9]|25[0-5])[.](?:[0-1]?[0-9]{1,2}|2[0-4][0-9]|25[0-5]))(?![0-9]))))|(?:\b(?:[0-9A-Za-z][0-9A-Za-z-]{0,62})(?:\.(?:[0-9A-Za-z][0-9A-Za-z-]{0,62}))*(\.?|\b)))) (?<ident>(?:(?:[a-zA-Z][a-zA-Z0-9_.+-=:]+)@(?:\b(?:[0-9A-Za-z][0-9A-Za-z-]{0,62})(?:\.(?:[0-9A-Za-z][0-9A-Za-z-]{0,62}))*(\.?|\b)))|(?:(?:[a-zA-Z0-9._-]+))) (?<auth>(?:[a-zA-Z0-9._-]+)) \[(?<Timestamp>(?:(?:(?:0[1-9])|(?:[12][0-9])|(?:3[01])|[1-9]))/(?:\b(?:[Jj]an(?:uary|uar)?|[Ff]eb(?:ruary|ruar)?|[Mm](?:a|ä)?r(?:ch|z)?|[Aa]pr(?:il)?|[Mm]a(?:y|i)?|[Jj]un(?:e|i)?|[Jj]ul(?:y|i)?|[Aa]ug(?:ust)?|[Ss]ep(?:tember)?|[Oo](?:c|k)?t(?:ober)?|[Nn]ov(?:ember)?|[Dd]e(?:c|z)(?:ember)?)\b)/(?:(?>\d\d){1,2}):(?:(?!<[0-9])(?:(?:2[0123]|[01]?[0-9])):(?:(?:[0-5][0-9]))(?::(?:(?:(?:[0-5]?[0-9]|60)(?:[:.,][0-9]+)?)))(?![0-9])) (?:(?:[+-]?(?:[0-9]+))))\] "(?:(?<http_method>\b\w+\b) (?<http_url>\S+)(?: HTTP/(?<http_version>(?:(?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\.[0-9]+)?)|(?:\.[0-9]+)))))))?|(?<rawrequest>.*?))" (?<http_status>(?:(?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\.[0-9]+)?)|(?:\.[0-9]+)))))) (?:(?<http_bytes>(?:(?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\.[0-9]+)?)|(?:\.[0-9]+))))))|-) (?:(?<http_response_time_us>(?:(?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\.[0-9]+)?)|(?:\.[0-9]+))))))|-) (?<referrer>(?:(?>(?<!\\)(?>"(?>\\.|[^\\"]+)+"|""|(?>'(?>\\.|[^\\']+)+')|''|(?>`(?>\\.|[^\\`]+)+`)|``)))) (?<agent>(?:(?>(?<!\\)(?>"(?>\\.|[^\\"]+)+"|""|(?>'(?>\\.|[^\\']+)+')|''|(?>`(?>\\.|[^\\`]+)+`)|``))))
2025-04-14 00:24:37 +0000 [warn]: define <match fluent.**> to capture fluentd logs in top level is deprecated. Use <label @FLUENT_LOG> instead
2025-04-14 00:24:37 +0000 [info]: using configuration file: <ROOT>
  <source>
    @type tail
    path "/var/log/kolla/barbican/*.log,/var/log/kolla/glance/*.log,/var/log/kolla/heat/*.log,/var/log/kolla/horizon/*.log,/var/log/kolla/keystone/*.log,/var/log/kolla/neutron/*.log,/var/log/kolla/nova/*.log"
    exclude_path ["/var/log/kolla/monasca/agent*.log","/var/log/kolla/monasca/monasca-api.log","/var/log/kolla/neutron/dnsmasq.log","/var/log/kolla/ironic/dnsmasq.log","/var/log/kolla/*/*-access.log","/var/log/kolla/*/*-error.log","/var/log/kolla/*/*_access.log","/var/log/kolla/*/*_error.log"]
    pos_file "/var/run/td-agent/kolla-openstack.pos"
    tag "kolla.*"
    ignore_repeated_permission_error true
    enable_watch_timer false
    <parse>
      @type "multiline"
      format_firstline "/^\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2}.\\d{3} \\d+ \\S+ \\S+ \\[(req-\\S+ \\S+ \\S+ \\S+ \\S+ \\S+|-)\\]/"
      format1 /^(?<Timestamp>\S+ \S+) (?<Pid>\d+) (?<log_level>\S+) (?<python_module>\S+) (\[(req-(?<request_id>\S+) (?<user_id>\S+) (?<tenant_id>\S+) (?<domain_id>\S+) (?<user_domain>\S+) (?<project_domain>\S+)|-)\])? (?<Payload>.*)?$/
      time_key "Timestamp"
      keep_time_key true
      time_format "%F %T.%L"
      unmatched_lines 
    </parse>
  </source>
  <source>
    @type syslog
    port 5140
    bind "10.0.0.38"
    tag "syslog"
    severity_key "log_level"
    source_hostname_key "Hostname"
    <parse>
      @type "regexp"
      expression /^(?<Payload>.*)$/
    </parse>
  </source>
  <source>
    @type tail
    path "/var/log/kolla/mariadb/mariadb.log"
    pos_file "/var/run/td-agent/mariadb.pos"
    tag "infra.mariadb"
    enable_watch_timer false
    <parse>
      @type "multiline"
      format_firstline "/^(\\d{4}-\\d{2}-\\d{2}|\\d{6}) /"
      format1 /^(?<Payload>.*)/
      unmatched_lines 
    </parse>
  </source>
  <source>
    @type tail
    path "/var/log/kolla/mariadb/xinetd.log"
    pos_file "/var/run/td-agent/mariadb-xinetd.pos"
    tag "infra.mariadb-xinetd"
    ignore_repeated_permission_error true
    enable_watch_timer false
    <parse>
      @type "multiline"
      format_firstline "/^\\d{2}/\\d{1,2}/\\d{1,2}@\\d{1,2}:\\d{1,2}:\\d{1,2}\\: (START|EXIT)\\: /"
      format1 /^(?<Timestamp>\S+) (?<Payload>.*)?$/
      time_key "Timestamp"
      keep_time_key true
      time_format "%y/%m/%d@%T"
      unmatched_lines 
    </parse>
  </source>
  <source>
    @type tail
    path "/var/log/kolla/rabbitmq/rabbit@an-jenkins-deploy-platform-ansible-os-3086-1.log"
    pos_file "/var/run/td-agent/rabbit.pos"
    tag "infra.rabbit"
    enable_watch_timer false
    <parse>
      @type "multiline"
      format_firstline "/^\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2}\\.\\d{3}/"
      format1 /^(?<Timestamp>\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}\.\d{3}) \[(?<log_level>\w+)\] (?<Payload>.*)/
      unmatched_lines 
    </parse>
  </source>
  <source>
    @type tail
    path "/var/log/kolla/*/*-access.log,/var/log/kolla/*/*-error.log,/var/log/kolla/*/*_access.log,/var/log/kolla/*/*_error.log"
    pos_file "/var/run/td-agent/kolla-openstack-wsgi.pos"
    tag "kolla.*"
    enable_watch_timer false
    <parse>
      @type "regexp"
      expression /^(?<Payload>.*)$/
      unmatched_lines 
    </parse>
  </source>
  <source>
    @type tail
    path "/var/log/kolla/libvirt/libvirtd.log"
    pos_file "/var/run/td-agent/libvirt.pos"
    tag "infra.libvirt"
    enable_watch_timer false
    <parse>
      @type "regexp"
      expression /^(?<Timestamp>\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}.\d{3}\+\d{4}): (?<Pid>\d+): (?<log_level>\S+) : (?<Payload>.*)?$/
      time_key "Timestamp"
      time_format "%F %T.%L%z"
      unmatched_lines 
    </parse>
  </source>
  <source>
    @type tail
    path "/var/log/kolla/zookeeper/zookeeper.log"
    pos_file "/var/run/td-agent/zookeeper.pos"
    tag "infra.*"
    <parse>
      @type "multiline"
      format_firstline "/^\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2},\\d{3} \\S+ \\S+ \\S+ .*$/"
      format1 /^(?<Timestamp>\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2},\d{3}) \[(?<server_id>\S+)\] \S+ (?<log_level>\S+) (?<Payload>.*)$/
      time_key "Timestamp"
      unmatched_lines 
    </parse>
  </source>
  <source>
    @type tail
    path "/var/log/kolla/kafka/controller.log, /var/log/kolla/kafka/server.log, /var/log/kolla/kafka/state-change.log"
    pos_file "/var/run/td-agent/kafka.pos"
    tag "infra.*"
    <parse>
      @type "multiline"
      format_firstline "/^\\[\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2},\\d{3}\\] \\S+ .*$/"
      format1 /^\[(?<Timestamp>\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2},\d{3})\] (?<log_level>\S+) (?<Payload>.*)$/
      time_key "Timestamp"
      unmatched_lines 
    </parse>
  </source>
  <source>
    @type tail
    path "/var/log/kolla/monasca/agent*.log"
    pos_file "/var/run/td-agent/monasca-agent.pos"
    tag "kolla.*"
    <parse>
      @type "multiline"
      format_firstline "/^\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2} \\S+ \\| \\S+ \\| \\S+ \\| .*$/"
      format1 /^(?<Timestamp>\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2} \S+) \| (?<log_level>\S+) \| (?<programname>\S+) \| (?<Payload>.*)$/
      time_key "Timestamp"
      unmatched_lines 
    </parse>
  </source>
  <source>
    @type tail
    path "/var/log/kolla/openvswitch/ovs-vswitchd.log"
    pos_file "/var/run/td-agent/openvswitch.pos"
    tag "infra.openvswitch"
    enable_watch_timer false
    <parse>
      @type "multiline"
      format_firstline "/^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}/"
      format1 /^(?<Timestamp>\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3})Z\|\d{5,}\|(?<module>\S+)\|(?<log_level>\S+)\|(?<Payload>.*)/
      time_key "Timestamp"
      time_format "%FT%T.%L"
      unmatched_lines 
    </parse>
  </source>
  <source>
    @type tail
    path "/var/log/kolla/openvswitch/ovsdb-server.log"
    pos_file "/var/run/td-agent/openvswitchdb.pos"
    tag "infra.openvswitchdb"
    enable_watch_timer false
    <parse>
      @type "multiline"
      format_firstline "/^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}/"
      format1 /^(?<Timestamp>\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3})Z\|\d{5,}\|(?<module>\S+)\|(?<log_level>\S+)\|(?<Payload>.*)/
      time_key "Timestamp"
      time_format "%FT%T.%L"
      unmatched_lines 
    </parse>
  </source>
  <filter *.var.log.kolla.*.*.log>
    @type record_transformer
    <record>
      Hostname ${hostname}
      Logger openstack.${tag_parts[4]}
      programname ${tag_parts[5]}
    </record>
  </filter>
  <filter infra.var.log.kolla.*.*.log>
    @type record_transformer
    <record>
      Logger ${tag_parts[4]}
    </record>
  </filter>
  <filter infra.*>
    @type record_transformer
    <record>
      Hostname ${hostname}
      programname ${tag_parts[1]}
    </record>
  </filter>
  <filter fluent.**>
    @type parser
    key_name "message"
    format /^(?<Payload>.*)$/
    <parse>
      @type regexp
      expression ^(?<Payload>.*)$
    </parse>
  </filter>
  <filter fluent.**>
    @type record_transformer
    <record>
      Hostname an-jenkins-deploy-platform-ansible-os-3086-1
      programname ${tag_parts[0]}
      log_level ${tag_parts[1]}
    </record>
  </filter>
  <match kolla.var.log.kolla.*.*.log>
    @type rewrite_tag_filter
    capitalize_regex_backreference yes
    <rule>
      key "programname"
      pattern ^(cinder-api-access|cloudkitty-api-access|gnocchi-api-access|horizon-access|keystone-apache-admin-access|keystone-apache-public-access|monasca-api-access|octavia-api-access|placement-api-access)$
      tag "apache_access"
    </rule>
    <rule>
      key "programname"
      pattern ^(aodh_wsgi_access|barbican_api_uwsgi_access|zun_api_wsgi_access|vitrage_wsgi_access)$
      tag "wsgi_access"
    </rule>
    <rule>
      key "programname"
      pattern ^(nova-api|nova-compute|nova-compute-ironic|nova-conductor|nova-manage|nova-novncproxy|nova-scheduler|nova-placement-api|placement-api|privsep-helper)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(sahara-api|sahara-engine)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(neutron-server|neutron-openvswitch-agent|neutron-ns-metadata-proxy|neutron-metadata-agent|neutron-l3-agent|neutron-dhcp-agent)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(magnum-conductor|magnum-api)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(keystone)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(heat-engine|heat-api|heat-api-cfn)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(glance-api)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(cloudkitty-storage-init|cloudkitty-processor|cloudkitty-dbsync|cloudkitty-api)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(ceilometer-polling|ceilometer-agent-notification)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(barbican-api|barbican-worker|barbican-keystone-listener|barbican-db-manage|app)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(aodh-notifier|aodh-listener|aodh-evaluator|aodh-dbsync)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(cyborg-api|cyborg-conductor|cyborg-agent)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(cinder-api|cinder-scheduler|cinder-manage|cinder-volume|cinder-backup|privsep-helper)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(mistral-server|mistral-engine|mistral-executor)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(designate-api|designate-central|designate-manage|designate-mdns|designate-sink|designate-worker)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(manila-api|manila-data|manila-manage|manila-share|manila-scheduler)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(trove-api|trove-conductor|trove-manage|trove-taskmanager)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(murano-api|murano-engine)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(senlin-api|senlin-conductor|senlin-engine|senlin-health-manager)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(watcher-api|watcher-applier|watcher-db-manage|watcher-decision-engine)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(freezer-api|freezer-api_access|freezer-manage)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(octavia-api|octavia-health-manager|octavia-housekeeping|octavia-worker)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(zun-api|zun-compute|zun-cni-daemon)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(kuryr-server)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(gnocchi-api|gnocchi-statsd|gnocchi-metricd|gnocchi-upgrade)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(ironic-api|ironic-conductor|ironic-inspector)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(tacker-server|tacker-conductor)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(vitrage-ml|vitrage-notifier|vitrage-graph|vitrage-persistor)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(blazar-api|blazar-manager)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(monasca-api|monasca-notification|monasca-persister|agent-collector|agent-forwarder|agent-statsd)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern ^(masakari-engine|masakari-api)$
      tag "openstack_python"
    </rule>
    <rule>
      key "programname"
      pattern .+
      tag "unmatched"
    </rule>
  </match>
  <match infra.mariadb>
    @type rewrite_tag_filter
    <rule>
      key "Payload"
      pattern /^\d{6}/
      tag "infra.mariadb.mysqld_safe"
    </rule>
    <rule>
      key "Payload"
      pattern /^\d{4}-\d{2}-\d{2}/
      tag "infra.mariadb.mysqld"
    </rule>
  </match>
  <filter infra.mariadb.mysqld_safe>
    @type parser
    format /^(?<Timestamp>\d{6} {1,2}\d{1,2}:\d{1,2}:\d{1,2}) +(?<Payload>mysqld_safe .*)/
    time_format %y%m%d %k:%M:%S
    time_key Timestamp
    key_name "Payload"
    reserve_data true
    <parse>
      time_key Timestamp
      time_format %y%m%d %k:%M:%S
      @type regexp
      expression ^(?<Timestamp>\d{6} {1,2}\d{1,2}:\d{1,2}:\d{1,2}) +(?<Payload>mysqld_safe .*)
    </parse>
  </filter>
  <filter infra.mariadb.mysqld>
    @type parser
    format /^(?<Timestamp>\d{4}-\d{2}-\d{2} {1,2}\d{1,2}:\d{1,2}:\d{1,2}) +(?<Payload>\w+ +(\[(?<log_level>\w+)\]|\w+: +(?<log_level>\w+):).*)/
    time_format %Y-%m-%d %k:%M:%S
    time_key Timestamp
    key_name "Payload"
    reserve_data true
    <parse>
      time_key Timestamp
      time_format %Y-%m-%d %k:%M:%S
      @type regexp
      expression ^(?<Timestamp>\d{4}-\d{2}-\d{2} {1,2}\d{1,2}:\d{1,2}:\d{1,2}) +(?<Payload>\w+ +(\[(?<log_level>\w+)\]|\w+: +(?<log_level>\w+):).*)
    </parse>
  </filter>
  <filter infra.mariadb.*>
    @type record_transformer
    <record>
      timestamp ${time}
    </record>
  </filter>
  <filter apache_access>
    @type parser
    reserve_data true
    key_name "Payload"
    <parse>
      @type "grok"
      grok_pattern "\\[%{HTTPDATE:Timestamp}\\] \"(?:%{WORD:http_method} %{NOTSPACE:http_url}(?: HTTP/%{NUMBER:http_version})?|%{DATA:rawrequest})\" %{NUMBER:http_status} (?:%{NUMBER:http_bytes}|-) (?:%{NUMBER:http_response_time_us}|-) \"%{DATA:referrer}\" \"%{DATA:agent}\""
      time_key "Timestamp"
      time_format "%d/%b/%Y:%H:%M:%S %z"
      keep_time_key true
    </parse>
  </filter>
  <filter wsgi_access>
    @type parser
    reserve_data true
    key_name "Payload"
    <parse>
      @type "grok"
      grok_pattern "%{IPORHOST:clientip} %{HTTPDUSER:ident} %{USER:auth} \\[%{HTTPDATE:Timestamp}\\] \"(?:%{WORD:http_method} %{NOTSPACE:http_url}(?: HTTP/%{NUMBER:http_version})?|%{DATA:rawrequest})\" %{NUMBER:http_status} (?:%{NUMBER:http_bytes}|-) (?:%{NUMBER:http_response_time_us}|-) %{QS:referrer} %{QS:agent}"
      time_key "Timestamp"
      time_format "%d/%b/%Y:%H:%M:%S %z"
      keep_time_key true
    </parse>
  </filter>
</ROOT>
2025-04-14 00:24:37 +0000 [info]: starting fluentd-1.15.3 pid=7 ruby="2.7.6"
2025-04-14 00:24:37 +0000 [info]: spawn command to main:  cmdline=["/opt/td-agent/bin/ruby", "-Eascii-8bit:ascii-8bit", "/usr/sbin/td-agent", "-o", "/var/log/kolla/fluentd/fluentd.log", "--under-supervisor"]
2025-04-14 00:24:37 +0000 [info]: init supervisor logger path=nil rotate_age=nil rotate_size=nil
2025-04-14 00:24:38 +0000 [info]: #0 init worker0 logger path=nil rotate_age=nil rotate_size=nil
2025-04-14 00:24:38 +0000 [info]: adding filter pattern="*.var.log.kolla.*.*.log" type="record_transformer"
2025-04-14 00:24:38 +0000 [info]: adding filter pattern="infra.var.log.kolla.*.*.log" type="record_transformer"
2025-04-14 00:24:38 +0000 [info]: adding filter pattern="infra.*" type="record_transformer"
2025-04-14 00:24:38 +0000 [info]: adding filter pattern="fluent.**" type="parser"
2025-04-14 00:24:38 +0000 [info]: adding filter pattern="fluent.**" type="record_transformer"
2025-04-14 00:24:38 +0000 [info]: adding match pattern="kolla.var.log.kolla.*.*.log" type="rewrite_tag_filter"
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x00000000024500e0 @keys="programname">, /^(cinder-api-access|cloudkitty-api-access|gnocchi-api-access|horizon-access|keystone-apache-admin-access|keystone-apache-public-access|monasca-api-access|octavia-api-access|placement-api-access)$/, "", "apache_access", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x00000000024130f0 @keys="programname">, /^(aodh_wsgi_access|barbican_api_uwsgi_access|zun_api_wsgi_access|vitrage_wsgi_access)$/, "", "wsgi_access", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000002410d00 @keys="programname">, /^(nova-api|nova-compute|nova-compute-ironic|nova-conductor|nova-manage|nova-novncproxy|nova-scheduler|nova-placement-api|placement-api|privsep-helper)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x00000000024f7db8 @keys="programname">, /^(sahara-api|sahara-engine)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x00000000024f7098 @keys="programname">, /^(neutron-server|neutron-openvswitch-agent|neutron-ns-metadata-proxy|neutron-metadata-agent|neutron-l3-agent|neutron-dhcp-agent)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x00000000024f62d8 @keys="programname">, /^(magnum-conductor|magnum-api)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x00000000024f51f8 @keys="programname">, /^(keystone)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x00000000024f4690 @keys="programname">, /^(heat-engine|heat-api|heat-api-cfn)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x00000000024c7258 @keys="programname">, /^(glance-api)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x00000000024c56d8 @keys="programname">, /^(cloudkitty-storage-init|cloudkitty-processor|cloudkitty-dbsync|cloudkitty-api)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x00000000024c4648 @keys="programname">, /^(ceilometer-polling|ceilometer-agent-notification)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x00000000024bbb38 @keys="programname">, /^(barbican-api|barbican-worker|barbican-keystone-listener|barbican-db-manage|app)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x00000000024bb430 @keys="programname">, /^(aodh-notifier|aodh-listener|aodh-evaluator|aodh-dbsync)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x00000000024bad28 @keys="programname">, /^(cyborg-api|cyborg-conductor|cyborg-agent)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x00000000024ba4e0 @keys="programname">, /^(cinder-api|cinder-scheduler|cinder-manage|cinder-volume|cinder-backup|privsep-helper)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x00000000024b9db0 @keys="programname">, /^(mistral-server|mistral-engine|mistral-executor)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x00000000024b9568 @keys="programname">, /^(designate-api|designate-central|designate-manage|designate-mdns|designate-sink|designate-worker)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x00000000024b8d70 @keys="programname">, /^(manila-api|manila-data|manila-manage|manila-share|manila-scheduler)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x00000000024b8500 @keys="programname">, /^(trove-api|trove-conductor|trove-manage|trove-taskmanager)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x000000000247ac00 @keys="programname">, /^(murano-api|murano-engine)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x000000000247a318 @keys="programname">, /^(senlin-api|senlin-conductor|senlin-engine|senlin-health-manager)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000002479968 @keys="programname">, /^(watcher-api|watcher-applier|watcher-db-manage|watcher-decision-engine)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x00000000024790d0 @keys="programname">, /^(freezer-api|freezer-api_access|freezer-manage)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000002478860 @keys="programname">, /^(octavia-api|octavia-health-manager|octavia-housekeeping|octavia-worker)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000002477e88 @keys="programname">, /^(zun-api|zun-compute|zun-cni-daemon)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000002477500 @keys="programname">, /^(kuryr-server)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000002476c40 @keys="programname">, /^(gnocchi-api|gnocchi-statsd|gnocchi-metricd|gnocchi-upgrade)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000002476240 @keys="programname">, /^(ironic-api|ironic-conductor|ironic-inspector)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x00000000024746c0 @keys="programname">, /^(tacker-server|tacker-conductor)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x000000000244f938 @keys="programname">, /^(vitrage-ml|vitrage-notifier|vitrage-graph|vitrage-persistor)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x000000000244edd0 @keys="programname">, /^(blazar-api|blazar-manager)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x000000000244e358 @keys="programname">, /^(monasca-api|monasca-notification|monasca-persister|agent-collector|agent-forwarder|agent-statsd)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x000000000244d750 @keys="programname">, /^(masakari-engine|masakari-api)$/, "", "openstack_python", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: programname [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x000000000244cc60 @keys="programname">, /.+/, "", "unmatched", nil]
2025-04-14 00:24:38 +0000 [info]: adding match pattern="infra.mariadb" type="rewrite_tag_filter"
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: Payload [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x0000000002390b78 @keys="Payload">, /^\d{6}/, "", "infra.mariadb.mysqld_safe", nil]
2025-04-14 00:24:38 +0000 [info]: #0 adding rewrite_tag_filter rule: Payload [#<Fluent::PluginHelper::RecordAccessor::Accessor:0x00000000023902b8 @keys="Payload">, /^\d{4}-\d{2}-\d{2}/, "", "infra.mariadb.mysqld", nil]
2025-04-14 00:24:38 +0000 [info]: adding filter pattern="infra.mariadb.mysqld_safe" type="parser"
2025-04-14 00:24:38 +0000 [info]: adding filter pattern="infra.mariadb.mysqld" type="parser"
2025-04-14 00:24:38 +0000 [info]: adding filter pattern="infra.mariadb.*" type="record_transformer"
2025-04-14 00:24:38 +0000 [info]: adding filter pattern="apache_access" type="parser"
2025-04-14 00:24:38 +0000 [info]: #0 Expanded the pattern \[%{HTTPDATE:Timestamp}\] "(?:%{WORD:http_method} %{NOTSPACE:http_url}(?: HTTP/%{NUMBER:http_version})?|%{DATA:rawrequest})" %{NUMBER:http_status} (?:%{NUMBER:http_bytes}|-) (?:%{NUMBER:http_response_time_us}|-) "%{DATA:referrer}" "%{DATA:agent}" into \[(?<Timestamp>(?:(?:(?:0[1-9])|(?:[12][0-9])|(?:3[01])|[1-9]))/(?:\b(?:[Jj]an(?:uary|uar)?|[Ff]eb(?:ruary|ruar)?|[Mm](?:a|ä)?r(?:ch|z)?|[Aa]pr(?:il)?|[Mm]a(?:y|i)?|[Jj]un(?:e|i)?|[Jj]ul(?:y|i)?|[Aa]ug(?:ust)?|[Ss]ep(?:tember)?|[Oo](?:c|k)?t(?:ober)?|[Nn]ov(?:ember)?|[Dd]e(?:c|z)(?:ember)?)\b)/(?:(?>\d\d){1,2}):(?:(?!<[0-9])(?:(?:2[0123]|[01]?[0-9])):(?:(?:[0-5][0-9]))(?::(?:(?:(?:[0-5]?[0-9]|60)(?:[:.,][0-9]+)?)))(?![0-9])) (?:(?:[+-]?(?:[0-9]+))))\] "(?:(?<http_method>\b\w+\b) (?<http_url>\S+)(?: HTTP/(?<http_version>(?:(?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\.[0-9]+)?)|(?:\.[0-9]+)))))))?|(?<rawrequest>.*?))" (?<http_status>(?:(?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\.[0-9]+)?)|(?:\.[0-9]+)))))) (?:(?<http_bytes>(?:(?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\.[0-9]+)?)|(?:\.[0-9]+))))))|-) (?:(?<http_response_time_us>(?:(?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\.[0-9]+)?)|(?:\.[0-9]+))))))|-) "(?<referrer>.*?)" "(?<agent>.*?)"
2025-04-14 00:24:38 +0000 [info]: adding filter pattern="wsgi_access" type="parser"
2025-04-14 00:24:38 +0000 [info]: #0 Expanded the pattern %{IPORHOST:clientip} %{HTTPDUSER:ident} %{USER:auth} \[%{HTTPDATE:Timestamp}\] "(?:%{WORD:http_method} %{NOTSPACE:http_url}(?: HTTP/%{NUMBER:http_version})?|%{DATA:rawrequest})" %{NUMBER:http_status} (?:%{NUMBER:http_bytes}|-) (?:%{NUMBER:http_response_time_us}|-) %{QS:referrer} %{QS:agent} into (?<clientip>(?:(?:(?:(?:((([0-9A-Fa-f]{1,4}:){7}([0-9A-Fa-f]{1,4}|:))|(([0-9A-Fa-f]{1,4}:){6}(:[0-9A-Fa-f]{1,4}|((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9A-Fa-f]{1,4}:){5}(((:[0-9A-Fa-f]{1,4}){1,2})|:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9A-Fa-f]{1,4}:){4}(((:[0-9A-Fa-f]{1,4}){1,3})|((:[0-9A-Fa-f]{1,4})?:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){3}(((:[0-9A-Fa-f]{1,4}){1,4})|((:[0-9A-Fa-f]{1,4}){0,2}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){2}(((:[0-9A-Fa-f]{1,4}){1,5})|((:[0-9A-Fa-f]{1,4}){0,3}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){1}(((:[0-9A-Fa-f]{1,4}){1,6})|((:[0-9A-Fa-f]{1,4}){0,4}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(:(((:[0-9A-Fa-f]{1,4}){1,7})|((:[0-9A-Fa-f]{1,4}){0,5}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:)))(%.+)?)|(?:(?<![0-9])(?:(?:[0-1]?[0-9]{1,2}|2[0-4][0-9]|25[0-5])[.](?:[0-1]?[0-9]{1,2}|2[0-4][0-9]|25[0-5])[.](?:[0-1]?[0-9]{1,2}|2[0-4][0-9]|25[0-5])[.](?:[0-1]?[0-9]{1,2}|2[0-4][0-9]|25[0-5]))(?![0-9]))))|(?:\b(?:[0-9A-Za-z][0-9A-Za-z-]{0,62})(?:\.(?:[0-9A-Za-z][0-9A-Za-z-]{0,62}))*(\.?|\b)))) (?<ident>(?:(?:[a-zA-Z][a-zA-Z0-9_.+-=:]+)@(?:\b(?:[0-9A-Za-z][0-9A-Za-z-]{0,62})(?:\.(?:[0-9A-Za-z][0-9A-Za-z-]{0,62}))*(\.?|\b)))|(?:(?:[a-zA-Z0-9._-]+))) (?<auth>(?:[a-zA-Z0-9._-]+)) \[(?<Timestamp>(?:(?:(?:0[1-9])|(?:[12][0-9])|(?:3[01])|[1-9]))/(?:\b(?:[Jj]an(?:uary|uar)?|[Ff]eb(?:ruary|ruar)?|[Mm](?:a|ä)?r(?:ch|z)?|[Aa]pr(?:il)?|[Mm]a(?:y|i)?|[Jj]un(?:e|i)?|[Jj]ul(?:y|i)?|[Aa]ug(?:ust)?|[Ss]ep(?:tember)?|[Oo](?:c|k)?t(?:ober)?|[Nn]ov(?:ember)?|[Dd]e(?:c|z)(?:ember)?)\b)/(?:(?>\d\d){1,2}):(?:(?!<[0-9])(?:(?:2[0123]|[01]?[0-9])):(?:(?:[0-5][0-9]))(?::(?:(?:(?:[0-5]?[0-9]|60)(?:[:.,][0-9]+)?)))(?![0-9])) (?:(?:[+-]?(?:[0-9]+))))\] "(?:(?<http_method>\b\w+\b) (?<http_url>\S+)(?: HTTP/(?<http_version>(?:(?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\.[0-9]+)?)|(?:\.[0-9]+)))))))?|(?<rawrequest>.*?))" (?<http_status>(?:(?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\.[0-9]+)?)|(?:\.[0-9]+)))))) (?:(?<http_bytes>(?:(?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\.[0-9]+)?)|(?:\.[0-9]+))))))|-) (?:(?<http_response_time_us>(?:(?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\.[0-9]+)?)|(?:\.[0-9]+))))))|-) (?<referrer>(?:(?>(?<!\\)(?>"(?>\\.|[^\\"]+)+"|""|(?>'(?>\\.|[^\\']+)+')|''|(?>`(?>\\.|[^\\`]+)+`)|``)))) (?<agent>(?:(?>(?<!\\)(?>"(?>\\.|[^\\"]+)+"|""|(?>'(?>\\.|[^\\']+)+')|''|(?>`(?>\\.|[^\\`]+)+`)|``))))
2025-04-14 00:24:38 +0000 [info]: adding source type="tail"
2025-04-14 00:24:38 +0000 [info]: adding source type="syslog"
2025-04-14 00:24:38 +0000 [info]: adding source type="tail"
2025-04-14 00:24:38 +0000 [info]: adding source type="tail"
2025-04-14 00:24:38 +0000 [info]: adding source type="tail"
2025-04-14 00:24:38 +0000 [info]: adding source type="tail"
2025-04-14 00:24:38 +0000 [info]: adding source type="tail"
2025-04-14 00:24:38 +0000 [info]: adding source type="tail"
2025-04-14 00:24:38 +0000 [info]: adding source type="tail"
2025-04-14 00:24:38 +0000 [info]: adding source type="tail"
2025-04-14 00:24:38 +0000 [info]: adding source type="tail"
2025-04-14 00:24:38 +0000 [info]: adding source type="tail"
2025-04-14 00:24:38 +0000 [warn]: #0 define <match fluent.**> to capture fluentd logs in top level is deprecated. Use <label @FLUENT_LOG> instead
2025-04-14 00:24:38 +0000 [info]: #0 starting fluentd worker pid=30 ppid=7 worker=0
2025-04-14 00:24:38 +0000 [info]: #0 listening syslog socket on 10.0.0.38:5140 with udp
2025-04-14 00:24:38 +0000 [info]: #0 fluentd worker is now running worker=0
2025-04-14 00:24:38 +0000 [info]: #0 disable filter chain optimization because [Fluent::Plugin::RecordTransformerFilter] uses `#filter_stream` method.
2025-04-14 00:24:38 +0000 [warn]: #0 no patterns matched tag="fluent.info"
2025-04-14 00:24:38 +0000 [warn]: #0 no patterns matched tag="fluent.info"