graylog_demo/td-agent.conf

<source>
  @type forward
  port 24224
</source>

<source>
  @type syslog
  port 5140
  tag system
</source>

<source>
  @type tail
  path /var/log/httpd/access_log
  pos_file /var/log/td-agent/access_log.pos
  tag httpd.access
  <parse>
    @type none
  </parse>
</source>

<match devel.*>
  @type copy
  <store>
    @type file
    path /var/log/containers/${tag}
    append true
    <buffer tag>
      @type file
      path /var/log/containers/buffer
      flush_interval 0s
    </buffer>
    <format>
      @type single_value
      message_key log
    </format>
  </store>
  <store>
    @type rewrite_tag_filter
    <rule>
      key container_name
      pattern /\/(.+)/
      tag ${tag}.$1
    </rule>
  </store>
</match>

<match **>
  @type forward
  transport tls
  tls_cert_path /vagrant/tmp/ca_cert.pem
  <server>
    name example.com
    host 172.28.128.30
    port 2514
  </server>
  <buffer>
    @type file
    path /var/log/fluentd_buffer
    flush_interval 0s
  </buffer>
</match>