- type: log
  id: lessie_search
  enabled: true
  paths:
    - /data/webapps/prod_lessie_sourcing_agents/logs/lessie_sourcing_agents_*.log
  include_lines: ['^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2},\d{3}'] # 只包含匹配该正则表达式的行
  fields:
    application: lessie_search
    log_type: lessie_search.log
    environment: us-prod
    instance: prod-lessie-server04
    ip : 170.106.187.156
  fields_under_root: true
  # multiline.pattern: '^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2},\d{3}'
  # multiline.negate: true
  # multiline.match: after
  ignore_older: 24h   # 忽略旧日志文件（避免处理已归档的日志）
  scan_frequency: 10s   # 定期扫描新文件的频率
  clean_inactive: 25h   # 清除超过一天未更新的文件
  close_inactive: 5m    # 文件超过5分钟无更新则关闭
  close_renamed: true   # 处理被重命名的文件
  start_position: beginning   # 从文件的开头读取