diff --git a/argocd/manifests/alloy-k8s/configmap.yaml b/argocd/manifests/alloy-k8s/configmap.yaml index acc8ba5..232afef 100644 --- a/argocd/manifests/alloy-k8s/configmap.yaml +++ b/argocd/manifests/alloy-k8s/configmap.yaml @@ -89,7 +89,7 @@ data: expression = "v1 Endpoints is deprecated" } - // Try to parse JSON logs + // Try to parse JSON logs (e.g., structured app logs) stage.json { expressions = { level = "level", @@ -98,10 +98,22 @@ data: } } - // Extract level from parsed JSON if available + // Try to parse logfmt logs (e.g., Loki, Prometheus, Go services) + stage.logfmt { + mapping = { + level = "level", + ts = "ts", + caller = "caller", + component = "component", + } + } + + // Extract labels from parsed data (works for both JSON and logfmt) stage.labels { values = { - level = "", + level = "", + caller = "", + component = "", } } }