Gijs
10/27/2025, 2:20 PM{
"body": "2025-10-27T13:54:18.47655819Z stderr F {\"timestamp\":\"2025-10-27T13:54:18.475990Z\",\"level\":\"INFO\",\"fields\":{\"message\":\"handling request\",\"workflow_id\":\"0d7ec256-ee9c-4c85-87cf-7e248c1eaccd\",\"function_name\":\"handle_tracing_logs\",\"method\":\"GET\"}}",
"id": "0iOAZU9FM7mFS1yxuQ1fYdiI1sN",
"timestamp": 1761573258477877800,
"attributes": {
"fluent.tag": "kube.var.log.containers.tracing-logs-7c5c8dbf5b-7q6hr_default_tracing-logs-5b0b870e3ac845ec4198de2c28bad0c270b3e9e14798d490691ae0b2c0e3f005.log"
},
"resources": {},
"scope": {},
"severity_text": "",
"severity_number": 0,
"scope_name": "",
"scope_version": "",
"span_id": "",
"trace_flags": 0,
"trace_id": ""
}
This is an example from this service its logfile
{
"timestamp": "2025-10-27T14:09:49.486890Z",
"level": "INFO",
"fields": {
"message": "request completed",
"workflow_id": "f76293c4-d371-4d15-bb56-48c1d987a944",
"function_name": "handle_tracing_logs",
"execution_time_ms": "0",
"execution_time_ns": "178129",
"execution_time_us": "178"
}
}Pat
10/28/2025, 10:38 AMPat
10/28/2025, 10:39 AMPat
10/28/2025, 10:39 AMPat
10/28/2025, 10:39 AMPat
10/28/2025, 10:40 AMPat
10/28/2025, 10:41 AMmultiline.parser cri, docker configuration in tail recommended by the docs: https://www.fluent.do/blog/kubernetes-logging#mounting-container-logs
This should at least split out the timestamp, stream and P/F fields.