# vi: ft=yaml
# Receive events from 24224/tcp
# This is used by log forwarding and the fluent-cat command
<source>
  @type forward
  port {{ fluent_forward_port }}
</source>

<filter access.**>
  @type geoip
  geoip_lookup_keys  host
  backend_library geoip2_c
  <record>
    latitude        ${location.latitude["host"]}
    longitude       ${location.longitude["host"]}
  </record>
  skip_adding_null_record  true
</filter>

<match cpu memory diskfree access.**>
  @type elasticsearch
  host maestro.dmz
  port {{ elasticsearch_port }}
  include_timestamp true
  logstash_format true
  logstash_prefix fluentd.${tag}
</match>

<match **>
  @type null
</match>

<system>
  log_level info
</system>