graylog_demo/td-agent.conf

<source>
  @type forward
  port 24224
</source>

<source>
  @type syslog
  port 5140
  tag system
</source>

<source>
  @type tail
  path /var/log/httpd/access_log
  pos_file /var/log/td-agent/access_log.pos
  tag httpd.access
  <parse>
    @type none
  </parse>
</source>

<filter httpd.access>
  @type parser
  key_name message
  reserve_data true
  <parse>
    @type apache2
  </parse>
</filter>


<match devel.*>
  @type copy
  <store>
    @type file
    path /var/log/containers/${tag}
    append true
    <buffer tag>
      timekey 5s
      flush_mode immediate
    </buffer>
  </store>
  <store>
    @type rewrite_tag_filter
    <rule>
      key container_name
      pattern /\/(.+)/
      tag ${tag}.$1
    </rule>
  </store>
</match>

<match **>
  @type gelf
  protocol tcp
  host localhost
  port 12201
  flush_interval 5s
</match>