OpenObserve

Send logs to OpenObserve using Fluent Bit

Use the OpenObserve output plugin to ingest logs into OpenObserve.

Before you begin, you need the following fields, which can be found under Ingestion in OpenObserve Cloud. Alternatively, you can achieve this with various installation types as mentioned in the OpenObserve documentation:

• OpenObserve account

• HTTP_User

• HTTP_Passwd

Configuration parameters

This plugin supports the following parameters:

Key	Description	Default
compress	Recommended. Compresses the payload in GZIP format. OpenObserve recommends setting this to gzip for optimized log ingestion.	none
format	The format of the log payload. OpenObserve expects JSON.	json
host	The OpenObserve server where you are sending logs.	localhost
http_passwd	Password for HTTP authentication.	none
http_user	Username for HTTP authentication.	none
include_tag_key	If true, a tag is appended to the output. The key name is used in the tag_key property.	false
json_date_format	Optional. The format of the date in logs. OpenObserve supports ISO 8601.	iso8601
json_date_key	Optional. The JSON key used for timestamps in the logs.	timestamp
tls	Enable end-to-end security using TLS. Set to on to enable TLS communication with OpenObserve.	on
uri	The API path used to send logs.	/api/default/default/_json

Configuration file

Use this configuration file to get started:

fluent-bit.yaml

pipeline:

  outputs:
    - name: http
      match: '*'
      uri: /api/default/default/_json
      host: localhost
      port: 5080
      tls: on
      format: json
      json_date_key: timestamp
      json_date_format: iso8601
      http_user: <YOUR_HTTP_USER>
      http_passwd: <YOUR_HTTP_PASSWORD>
      compress: gzip

fluent-bit.conf