Fluentd processes logs and events from multiple sources by assigning each a tag based on its input source. It then matches these tags to specific outputs like databases or search engines. Fluentd can also re-process events by assigning a new tag to allow for filtering of data to different destinations.
5. Apache log
Fluentd
tag=web.access
? web.access?
? web.error?
? syslog?
MongoDB
Elastic
search
tag=syslog
syslog
Fluentd can re-emit
events back to
Fluentd with a new
tag. This is how
filtering works.