From b49a864cbb12c005f607a0d40af058b24a16570a Mon Sep 17 00:00:00 2001
From: Stefan Reimer <stefan@zero-downtime.net>
Date: Tue, 8 Sep 2020 15:05:31 +0100
Subject: [PATCH] Update fluentd to latest quay.io image, add json parser for
 message

---
 charts/kubezero-logging/README.md.gotmpl |  1 +
 charts/kubezero-logging/values.yaml      | 12 ++++++++++--
 2 files changed, 11 insertions(+), 2 deletions(-)

diff --git a/charts/kubezero-logging/README.md.gotmpl b/charts/kubezero-logging/README.md.gotmpl
index b29d9e9c..e1d1e66c 100644
--- a/charts/kubezero-logging/README.md.gotmpl
+++ b/charts/kubezero-logging/README.md.gotmpl
@@ -45,3 +45,4 @@
 
 - https://www.elastic.co/downloads/elastic-cloud-kubernetes
 - https://github.com/elastic/cloud-on-k8s
+- https://grafana.com/grafana/dashboards/7752
diff --git a/charts/kubezero-logging/values.yaml b/charts/kubezero-logging/values.yaml
index f54e407c..3fba750f 100644
--- a/charts/kubezero-logging/values.yaml
+++ b/charts/kubezero-logging/values.yaml
@@ -31,7 +31,7 @@ fluentd:
   enabled: false
   image:
     repository: quay.io/fluentd_elasticsearch/fluentd
-    tag: v2.9.0
+    tag: v3.0.4
   istio:
     enabled: false
 
@@ -158,7 +158,15 @@ fluentd:
         </buffer>
       </match>
 
-#  filter.conf: |
+    filter.conf: |
+      <filter kube.*>
+        key_name message
+        remove_key_name_field true
+        <parse>
+          @type json
+        </parse>
+      </filter>
+
 #    <filter auth system.auth>
 #      @type parser
 #      key_name message