diff --git a/manifests/efk/fluentd-es-configmap.yaml b/manifests/efk/fluentd-es-configmap.yaml
index a6d0cbe..cf1439b 100644
--- a/manifests/efk/fluentd-es-configmap.yaml
+++ b/manifests/efk/fluentd-es-configmap.yaml
@@ -147,7 +147,8 @@ data:
     <filter **>
       @id filter_concat
       @type concat
-      key message
+      key log
+      use_first_timestamp true
       multiline_end_regexp /\n$/
       separator ""
     </filter>