<source>
@type tail
path /var/log/pythonrestapi/log*
pos_file /var/log/td-agent/pos/pythonrestapi_logs.pos
read_from_head true
tag pythonrestapi
<parse>
@type multi_format
<pattern>
# Assuming log format is like "2025-04-04 05:44:55 INFO Running app..."
format /^(?<time>\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}) (?<level>\w+) (?<message>.*)$/
time_format %Y-%m-%d %H:%M:%S
keep_time_key true
</pattern>
</parse>
</source>
Can we be friends btw?