## 源配置:从 Docker 获取容器日志 [sources.platform_logs] type = "docker_logs" include_containers = ["platform"] ## 转换配置:为日志添加元数据 [transforms.platform_logs_parse] type = "remap" inputs = ["platform_logs"] source = ''' .container = "platform" json, err = parse_json(.message) if err != null { log.error("日志转换 json 格式失败: {}", err) .tag = "error" return } . = merge(., json) ''' [transform.platform_logs_route] type = "route" inputs = ["platform_logs_parse"] [transform.platform_logs_route.route] request = '.message == "接口请求"' usage = '.message == "创建通道"' ## 输出配置:将日志保存到 postgresql [sinks.platform_logs_request] type = "postgres" inputs = ["platform_logs_route.request"] [sinks.platform_logs_login] type = "postgres" inputs = ["platform_logs_route.login"] [sinks.platform_logs_usage] type = "postgres" inputs = ["platform_logs_route.usage"]