containerrules

Defines lognorm rules to parse CONTAINER_NAME values for metadata.

This parameter applies to Kubernetes Metadata Module (mmkubernetes).

Name:

containerrules

Scope:

action

Type:

word

Default:

SEE BELOW

Required?:

no

Introduced:

at least 8.x, possibly earlier

Description

Note

This directive is not supported with liblognorm 2.0.2 and earlier.

For journald logs, there must be a message property CONTAINER_NAME which has a value matching these rules specified by this parameter. The default value is:

rule=:%k8s_prefix:char-to:_%_%container_name:char-to:.%.%container_hash:char-to:\
_%_%pod_name:char-to:_%_%namespace_name:char-to:_%_%not_used_1:char-to:_%_%not_u\
sed_2:rest%
rule=:%k8s_prefix:char-to:_%_%container_name:char-to:_%_%pod_name:char-to:_%_%na\
mespace_name:char-to:_%_%not_used_1:char-to:_%_%not_used_2:rest%

Note

In the above rules, the slashes \ ending each line indicate line wrapping - they are not part of the rule.

There are two rules because the container_hash is optional.

Action usage

action(type="mmkubernetes" containerRules="...")

See also

See also Kubernetes Metadata Module (mmkubernetes).


Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2025 Rainer Gerhards and others. Licensed under the Apache License 2.0.