-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
Missing from you fluentbit setup - you need to add the parser "iptables" into parser.conf, which you can find in https://github.com/fluent/fluent-bit/blob/master/conf/parsers_extra.conf
While you're at it, please include the install details for the "geoip" parser on flunetd. I'm still trying to sort that out - I think I found the correct one at https://github.com/y-ken/fluent-plugin-geoip.
https://github.com/BudgetSmartHome/home-lab-configs/blob/main/fluent-bit/fluent-bit.conf#L23-L24 calls the LUA script at https://github.com/BudgetSmartHome/home-lab-configs/blob/main/fluent-bit/parse_timestamp.lua which should do the conversion from your local TZ to UTC, but that assumes that you're passing data in stamped with your local TZ. If you're sending it data that's already in UTC I'm not sure what it does!
Related posts
-
Fluentbit Kubernetes - How to extract fields from existing logs
-
Parsing multiline logs using a custom Fluent Bit configuration
-
Preferred Linux Distribution for production and why?
-
How can I conditionally parse logs with regeX to assign “codes” to events?
-
Is it possible to change the PAGESIZE/Kernel to RHCK of OKE image?