Log output is not expected, need to remove some unused info

[wwyhy]

Bug Report

Describe the bug
Log output is not expected, (remove time kv, and message key, only keep value of message)

To Reproduce

• Can not be reproduce by Rubular

Current behavior
2025-01-17 17:24:50.363
time="2025-01-17T09:24:50.363234193Z" message="{"level":"info","time":"2025-01-17T09:24:50.363146Z","scope":"xdsproxy","msg":"connected to delta upstream XDS server: istiod-canary.istio-system.svc:15012","id":539}"

Expected behavior
2025-01-17 17:24:50.363
{"level":"info","time":"2025-01-17T09:24:50.363146Z","scope":"xdsproxy","msg":"connected to delta upstream XDS server: istiod-canary.istio-system.svc:15012","id":539}

Screenshots

Pod Log:

Loki Query result:

Your Environment

• Version used: 3.2.4
• Environment name and version (Kubernetes 1.30.3):
• Configuration, Filters and plugins:

Thanks!

[patrick-stephens]

Do not make your own docker or CRI parsers - use the built in ones particularly for K8S: https://chronosphere.io/learn/fluent-bit-kubernetes-filter/#Troubleshooting%20misconfiguration%20woes

Does it happen with the built-in CRI parser using the recommended configuration in the docs?
https://docs.fluentbit.io/manual/pipeline/inputs/tail#multiline-and-containers-v1.8

[INPUT]
    name              tail
    path              /var/log/containers/*.log
    multiline.parser  docker, cri

[wwyhy]

@patrick-stephens

Sorry for my incorrect description.

I upgraded fluentbit from v2.x to 3.2.4, then below content is added to each of line, now I want to remove them, only keep content of message. how to remove them? thanks!

time="2025-01-17T09:24:50.363234193Z" message=""