diff --git a/charts/kubezero-logging/Chart.yaml b/charts/kubezero-logging/Chart.yaml
index b6cf4a68..3434d60e 100644
--- a/charts/kubezero-logging/Chart.yaml
+++ b/charts/kubezero-logging/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: kubezero-logging
 description: KubeZero Umbrella Chart for complete EFK stack
 type: application
-version: 0.3.8
+version: 0.3.9
 appVersion: 1.2.1
 home: https://kubezero.com
 icon: https://cdn.zero-downtime.net/assets/kubezero/logo-small-64.png
diff --git a/charts/kubezero-logging/values.yaml b/charts/kubezero-logging/values.yaml
index 47b21f3f..17d1faba 100644
--- a/charts/kubezero-logging/values.yaml
+++ b/charts/kubezero-logging/values.yaml
@@ -31,7 +31,7 @@ fluentd:
   enabled: false
   image:
     repository: quay.io/fluentd_elasticsearch/fluentd
-    tag: v3.0.4
+    tag: v2.9.0
   istio:
     enabled: false
 
@@ -230,9 +230,10 @@ fluent-bit:
           Path /var/log/containers/*.log
           Parser cri
           Tag kube.*
-          Mem_Buf_Limit 5MB
+          Mem_Buf_Limit 8MB
           Skip_Long_Lines On
           Refresh_Interval 10
+          Exclude_Path *.gz,*.zip
           DB /var/log/flb_kube.db
           DB.Sync Normal
       [INPUT]
@@ -240,9 +241,8 @@ fluent-bit:
           Path /var/log/kubernetes/audit.log
           Parser json
           Tag audit.api-server
-          Mem_Buf_Limit 5MB
+          Mem_Buf_Limit 8MB
           Skip_Long_Lines On
-          Refresh_Interval 60
           DB /var/log/flb_kube_audit.db
           DB.Sync Normal