From 77a166a28f5d1c5bd5d1395205aedd505cae7daf Mon Sep 17 00:00:00 2001 From: braydonk Date: Tue, 4 Jun 2024 14:43:22 +0000 Subject: [PATCH 1/2] Add Time_System_Timezone parser option docs --- pipeline/parsers/configuring-parser.md | 1 + 1 file changed, 1 insertion(+) diff --git a/pipeline/parsers/configuring-parser.md b/pipeline/parsers/configuring-parser.md index c9472a11d..ef02d7cca 100644 --- a/pipeline/parsers/configuring-parser.md +++ b/pipeline/parsers/configuring-parser.md @@ -32,6 +32,7 @@ Multiple parsers can be defined and each section has it own properties. The foll | Time\_Format | Specify the format of the time field so it can be recognized and analyzed properly. Fluent-bit uses `strptime(3)` to parse time so you can refer to [strptime documentation](https://linux.die.net/man/3/strptime) for available modifiers. | | Time\_Offset | Specify a fixed UTC time offset \(e.g. -0600, +0200, etc.\) for local dates. | | Time\_Keep | By default when a time key is recognized and parsed, the parser will drop the original time field. Enabling this option will make the parser to keep the original time field and it value in the log entry. | +| Time\_System\_Timezone | If there is no timezone (`%z`) specified in the given `Time_Format`, enabling this option will make the parser detect and use the system's configured timezone. | | Types | Specify the data type of parsed field. The syntax is `types : : ...`. The supported types are `string`\(default\), `integer`, `bool`, `float`, `hex`. The option is supported by `ltsv`, `logfmt` and `regex`. | | Decode\_Field | Decode a field value, the only decoder available is `json`. The syntax is: `Decode_Field json `. | | Skip\_Empty\_Values | Specify a boolean which determines if the parser should skip empty values. The default is `true`. | From 39a21a117ed67862baf6dd249c874404ca73eed6 Mon Sep 17 00:00:00 2001 From: braydonk Date: Tue, 4 Jun 2024 15:18:59 +0000 Subject: [PATCH 2/2] Mention TZ environment variable in the Time_System_Timezone docs --- pipeline/parsers/configuring-parser.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pipeline/parsers/configuring-parser.md b/pipeline/parsers/configuring-parser.md index ef02d7cca..33d60a10e 100644 --- a/pipeline/parsers/configuring-parser.md +++ b/pipeline/parsers/configuring-parser.md @@ -32,7 +32,7 @@ Multiple parsers can be defined and each section has it own properties. The foll | Time\_Format | Specify the format of the time field so it can be recognized and analyzed properly. Fluent-bit uses `strptime(3)` to parse time so you can refer to [strptime documentation](https://linux.die.net/man/3/strptime) for available modifiers. | | Time\_Offset | Specify a fixed UTC time offset \(e.g. -0600, +0200, etc.\) for local dates. | | Time\_Keep | By default when a time key is recognized and parsed, the parser will drop the original time field. Enabling this option will make the parser to keep the original time field and it value in the log entry. | -| Time\_System\_Timezone | If there is no timezone (`%z`) specified in the given `Time_Format`, enabling this option will make the parser detect and use the system's configured timezone. | +| Time\_System\_Timezone | If there is no timezone (`%z`) specified in the given `Time_Format`, enabling this option will make the parser detect and use the system's configured timezone. The configured timezone is detected from the [`TZ` environment variable](https://www.gnu.org/software/libc/manual/html_node/TZ-Variable.html). | | Types | Specify the data type of parsed field. The syntax is `types : : ...`. The supported types are `string`\(default\), `integer`, `bool`, `float`, `hex`. The option is supported by `ltsv`, `logfmt` and `regex`. | | Decode\_Field | Decode a field value, the only decoder available is `json`. The syntax is: `Decode_Field json `. | | Skip\_Empty\_Values | Specify a boolean which determines if the parser should skip empty values. The default is `true`. |