From 691467b0c9b271bc55b11487ee54920c8dda6d78 Mon Sep 17 00:00:00 2001
From: baixiaoyong <baixiaoyong@mycapital.net>
Date: Wed, 27 Jan 2021 21:43:25 -0800
Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E5=A4=8Dfluentd=E6=8B=86=E5=88=86?=
 =?UTF-8?q?=E5=8D=95=E8=A1=8Cdocker=E6=97=A5=E5=BF=97=E4=B8=BA=E5=A4=9A?=
 =?UTF-8?q?=E8=A1=8C=E7=9A=84=E9=97=AE=E9=A2=98?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 manifests/efk/fluentd-es-configmap.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/manifests/efk/fluentd-es-configmap.yaml b/manifests/efk/fluentd-es-configmap.yaml
index a6d0cbe..cf1439b 100644
--- a/manifests/efk/fluentd-es-configmap.yaml
+++ b/manifests/efk/fluentd-es-configmap.yaml
@@ -147,7 +147,8 @@ data:
     <filter **>
       @id filter_concat
       @type concat
-      key message
+      key log
+      use_first_timestamp true
       multiline_end_regexp /\n$/
       separator ""
     </filter>