Skip to content

Instantly share code, notes, and snippets.

@radixm46
Created August 22, 2022 17:14
Show Gist options
  • Save radixm46/bab5a461a8de9584fa917bed46922146 to your computer and use it in GitHub Desktop.
Save radixm46/bab5a461a8de9584fa917bed46922146 to your computer and use it in GitHub Desktop.
unbound log parsers for fluent-bit
# for log-time-ascii: no
[PARSER]
Name unbound
Format regex
Regex ^\[(?<time>[\d]*)\] (?<process>[\D]*)\[(?<pid>[\d]*):(?<tid>[\d]*)\] (?<message_type>[\D]*): (?<message>.*)
Time_Key time
# for log-time-ascii: yes
[PARSER]
Name unbound_utc
Format regex
Regex ^(?<time>\w{3}\s\d{1,2}\s[^ ]*) (?<process>[\D]*)\[(?<pid>[\d]*):(?<tid>[\d]*)\] (?<message_type>[\D]*): (?<message>.*)
Time_Key time
Time_Format %b %d %H:%M:%S
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment