Merge pull request #32 from guardian/aa/ecs-parser

fix: Use custom parser to correctly process time field
guardian · Oct 16, 2023 · 1153950 · 1153950
2 parents 53f1a41 + 2a8fb05
commit 1153950
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 6 deletions.
diff --git a/ecs/Dockerfile b/ecs/Dockerfile
@@ -1,2 +1,3 @@
 FROM amazon/aws-for-fluent-bit:latest
+ADD parsers.conf /parsers.conf
 ADD custom.conf /custom.conf
diff --git a/ecs/custom.conf b/ecs/custom.conf
@@ -1,18 +1,22 @@
 [SERVICE]
-    Parsers_File /fluent-bit/parsers/parsers.conf
+    Parsers_File /parsers.conf
 
 [FILTER]
     Name modify
     Match *
-    Add ShippedBy devx-logs-for-ecs
-    Add stack ${STACK}
-    Add stage ${STAGE}
-    Add app ${APP}
-    Add gu:repo ${GU_REPO}
     Rename log message
 
 [FILTER]
     Name parser
     Match *
     Key_Name message
     Parser json
+
+[FILTER]
+    Name modify
+    Match *
+    Add ShippedBy devx-logs
+    Add stack ${STACK}
+    Add stage ${STAGE}
+    Add app ${APP}
+    Add gu:repo ${GU_REPO}
diff --git a/ecs/parsers.conf b/ecs/parsers.conf
@@ -0,0 +1,5 @@
+[PARSER]
+    Name json
+    Format json
+    Time_Key time
+    Time_Format %Y-%m-%dT%H:%M:%SZ