K8S部署vector日志采集(DaemonSet方式)

• 1、创建vector-config.yaml

  注意配置内容要按照项目自身清空修改路径和解析配置

  kind: ConfigMap
  apiVersion: v1
  metadata:
    name: vector-config
    namespace: stc-observable
  data:
    vector.toml: |
      data_dir = "/data/public/vector/data_dir"
      
      [sources.moss]
      type = "file"
      include = [ "/data/observable/logs/*/*/logs/*.log" ]
        [sources.moss.multiline]
          start_pattern = '^\d{4}-\d{2}-\d{2}\s\d{2}:\d{2}:\d{2}\.\d{3}\s+\[.*\]\s+\[TID:.*\]\s'
          mode = "halt_before"
          condition_pattern = '^\d{4}-\d{2}-\d{2}\s\d{2}:\d{2}:\d{2}\.\d{3}\s+\[.*\]\s+\[TID:.*\]\s'
          timeout_ms = 3000
      
      [transforms.parse_moss]
      type = "remap"
      inputs = ["moss"]
      # 将message字段通过正则匹配出时间、线程名、级别、类名和日志内容，并将applicationCode字段添加到message字段中，最后输出message为json格式
      source = '''
        . |= parse_regex!(.message, r'^(?P<log