I have the same issue, with tail, but for "normal"...
# fluent-bit
d
I have the same issue, with tail, but for "normal" logs, created by rsyslog. I want to send also all logs to Graylog, but I was not able to get it working, neither via systemd, nor over tail and /var/log/*.log ...
right now, I have something like:
Copy code
outputs:
    - name: gelf
      match: graylog
      host: 172.16.0.206
      port: 12201
      mode: tcp
      Gelf_Short_Message_Key:    short_message
      Gelf_Timestamp_Key:    timestamp
      Gelf_Host_Key:    host
      Gelf_Full_Message_Key:    full_message
      Gelf_Level_Key:    level
but, it seems not helping.
I was able with modify:
Copy code
- Name: modify
      Match: graylog
      Add: version 1.1
      Add: host ${HOSTNAME}
but .. that is hardcoded .. can I somehow use a variable, which contains the hostname? Found it :-)