itamae/cookbooks/fluentd/files/etc/td-agent/conf.d/processor.conf

<label @forward>
  <match consul>
    @type relabel
    @label @consul_branch
  </match>

  <match nginx>
    @type relabel
    @label @s3_upload
  </match>

  <match **>
    @type relabel
    @label @process
  </match>
</label>

<label @received>
  <match consul>
    @type relabel
    @label @consul_branch
  </match>

  <match nginx>
    @type relabel
    @label @s3_upload
  </match>

  <match **>
    @type copy

    <store>
      @type relabel
      @label @process
    </store>

    <store>
      @type file
      path /tmp/received.log
    </store>
  </match>
</label>

<label @process>
  <match auth>
    @type relabel
    @label @good
  </match>

  <filter aptitude>
    @type grep

    <regexp>
      key message
      pattern (Commandline|Error|Install|Remove|Upgrade)
    </regexp>
  </filter>

  <match aptitude>
    @type copy

    <store>
      @type relabel
      @label @good
    </store>

    <store>
      @type file
      path /tmp/aptitude.log
    </store>
  </match>

  <filter monit>
    @type grep

    <exclude>
      key message
      pattern (error|ERROR)
    </exclude>
  </filter>

  <match monit>
    @type relabel
    @label @danger
  </match>

  <match cron_apt>
    @type copy

    <store>
      @type relabel
      @label @good
    </store>

    <store>
      @type file
      path /tmp/cron-apt.log
    </store>
  </match>

  <match consul>
    @type relabel
    @label @danger
  </match>

  <filter td_agent>
    @type grep

    <exclude>
      key message
      pattern (\[info\]|parameter '.*' in|suppressed same stacktrace|loop\.rb|in_tail\.rb| 0(6|7):25|from ASCII-8BIT to UTF-8|of buffered_slack plugin)
    </exclude>

    <regexp>
      key message
      pattern \[(warn|error)\]
    </regexp>
  </filter>

  <match td_agent>
    @type relabel
    @label @danger
  </match>

  <filter app.**>
    @type record_transformer
    <record>
      message ${record["log"]}
    </record>
  </filter>

  <match app.**>
    @type relabel
    @label @apps
  </match>

  <match random.**>
    @type relabel
    @label @random
  </match>

  <match apt-mirror.**>
    @type relabel
    @label @good
  </match>
</label>