[sources.docker] type = "docker_logs" include_containers = ["proxy-server-dev-service"] [transforms.parse] type = "remap" inputs = ["docker"] source = ". = parse_json!(.message)" [transforms.destinations] type = "filter" inputs = ["parse"] condition = ".msg == \"用户访问记录\"" [sinks.file_out] type = "file" inputs = ["destinations"] path = "/temp/vector/service-destinations/%Y-%m-%d.log" encoding.codec = "csv" encoding.csv.fields = ["time", "uid", "user", "proxy", "node", "proto", "dest", "domain"] [sinks.file_out.buffer] type = "disk" max_size = 268435488 [api] enabled = true address = "0.0.0.0:8686"