# Read from fluent-bit <source> @type forward port 24224 bind 0.0.0.0 tag kube.logs </source> #rewrite tag with namespace name <match kube.logs> @type rewrite_tag_filter <rule> key $.kubernetes.namespace_name pattern ^(.+)$ tag namespace.$1 </rule> </match> #apply custom filter on namespace name <filter namespace.kube> @type custom group "namespace.kube" maxevents 5 duration 60 </filter> <filter namespace.default> @type custom group "namespace.default" maxevents 3 duration 60 </filter> #Send data to http <match **> @type http ssl_no_verify true content_type application/json endpoint https://xxxx headers {"Authorization":"apiKey","Content-Type":"application/json"} json_array true </match>