You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
starting with fluent-bit 3.2.3 systemd input has extra characters at the end of the MESSAGE field causing json parser filter to fail.
To Reproduce
logging from docker in json format and docker configured to send logs to journald
[SERVICE]
flush 1
log_level info
parsers_file /etc/fluent-bit/parsers.conf
[INPUT]
name systemd
systemd_filter_type and
systemd_filter _SYSTEMD_UNIT=docker.service
systemd_filter PRIORITY=6
systemd_filter CONTAINER_NAME=my-container
[FILTER]
name parser
match *
key_name MESSAGE
parser json
[OUTPUT]
name stdout
match *
Steps to reproduce the problem:
run fluent-bit with the above configuration
The output is the full verbose record from systemd, not just the MESSAGE value. (the filter has no effect)
Inspect the MESSAGE in the output and see the full expected json message, followed by additional characters (looks like buffer re-use without clearing). the MESSAGE is unparsed
Expected behavior
The output should be just the MESSAGE from the input parsed as json (verified in version 3.2.2)
Your Environment
Version used: 3.2.4
Configuration: see above
Environment name and version (e.g. Kubernetes? What version?):
Server type and version:
Operating System and version: alma linux 9
Filters and plugins: parser
Additional context
The text was updated successfully, but these errors were encountered:
Bug Report
Describe the bug
starting with fluent-bit 3.2.3 systemd input has extra characters at the end of the MESSAGE field causing json parser filter to fail.
To Reproduce
logging from docker in json format and docker configured to send logs to journald
run fluent-bit with the above configuration
The output is the full verbose record from systemd, not just the MESSAGE value. (the filter has no effect)
Inspect the MESSAGE in the output and see the full expected json message, followed by additional characters (looks like buffer re-use without clearing). the MESSAGE is unparsed
Expected behavior
The output should be just the MESSAGE from the input parsed as json (verified in version 3.2.2)
Your Environment
Additional context
The text was updated successfully, but these errors were encountered: