fluent

# cat output.conf
# Enriches records with Kubernetes metadata
<filter kubernetes.**>
  @type kubernetes_metadata
</filter>

# Concatenate multi-line logs
<filter **>
  @type concat
  key message
  multiline_end_regexp /\n$/
  separator ""
</filter>

<match **>
  @id elasticsearch
  @type elasticsearch
  @log_level info
  type_name fluentd
  include_tag_key true
  host efk-server
  port 9200
  logstash_format true
  <buffer>
    @type file
    path /var/log/fluentd-buffers/kubernetes.system.buffer
    flush_mode interval
    retry_type exponential_backoff
    flush_thread_count 2
    flush_interval 5s
    retry_forever
    retry_max_interval 30
    chunk_limit_size 50M
    queue_limit_length 8
    overflow_action block
  </buffer>
</match># exit