@type tail path /var/log/kolla/zookeeper/zookeeper.log pos_file /var/run/{{ fluentd_binary }}/zookeeper.pos tag infra.* format multiline format_firstline /^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2},\d{3} \S+ \S+ \S+ .*$/ format1 /^(?\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2},\d{3}) \[(?\S+)\] \S+ (?\S+) (?.*)$/ time_key Timestamp