# Fluent Bit HTTPS 配置（边缘节点日志采集 -> ClickHouse HTTPS）
# HTTP: /var/log/edge/edge-node/*.log
# DNS:  /var/log/edge/edge-dns/*.log
#
# 启动前请设置环境变量：
#   CH_USER=default
#   CH_PASSWORD=your_password
# 如需改地址/端口，请修改 OUTPUT 中 Host/Port（默认 127.0.0.1:8443）
# 如证书为公网CA可省略 tls.ca_file；自签名证书请配置 tls.ca_file

[SERVICE]
    Flush        5
    Log_Level    info
    Parsers_File parsers.conf
    storage.path              /var/lib/fluent-bit/storage
    storage.sync              normal
    storage.checksum          off
    storage.backlog.mem_limit 128MB

[INPUT]
    Name              tail
    Path              /var/log/edge/edge-node/*.log
    Tag               app.http.logs
    Parser            json
    Refresh_Interval  5
    Read_from_Head    false
    DB                /var/lib/fluent-bit/http-logs.db
    Mem_Buf_Limit     128MB
    Skip_Long_Lines   On

[INPUT]
    Name              tail
    Path              /var/log/edge/edge-dns/*.log
    Tag               app.dns.logs
    Parser            json
    Refresh_Interval  5
    Read_from_Head    false
    DB                /var/lib/fluent-bit/dns-logs.db
    Mem_Buf_Limit     128MB
    Skip_Long_Lines   On

[OUTPUT]
    Name            http
    Match           app.http.logs
    Host            127.0.0.1
    Port            8443
    URI             /?query=INSERT%20INTO%20default.logs_ingest%20FORMAT%20JSONEachRow
    Format          json_lines
    http_user       ${CH_USER}
    http_passwd     ${CH_PASSWORD}
    tls             On
    tls.verify      On
    # tls.ca_file   /etc/ssl/certs/ca-certificates.crt
    # tls.vhost     clickhouse.example.com
    json_date_key   timestamp
    json_date_format epoch
    Retry_Limit     10

[OUTPUT]
    Name            http
    Match           app.dns.logs
    Host            127.0.0.1
    Port            8443
    URI             /?query=INSERT%20INTO%20default.dns_logs_ingest%20FORMAT%20JSONEachRow
    Format          json_lines
    http_user       ${CH_USER}
    http_passwd     ${CH_PASSWORD}
    tls             On
    tls.verify      On
    # tls.ca_file   /etc/ssl/certs/ca-certificates.crt
    # tls.vhost     clickhouse.example.com
    json_date_key   timestamp
    json_date_format epoch
    Retry_Limit     10