I have fluent bit containers that get the file with foward and then send them to loki and also write them to a file with the name of the container. The files are needed in the future as storage since they will be zipped and stored. This part work just fine but if i try to get the logs from the files i have the problem that loki/grafana read the files all in one add the timestamp of when the files are read an not the timestamp of the log. Im aware that with promtail is possible to set a custom timestamp for loki, but for promtail i have not found anything. I can manipolate the files and the log rows a i want and i tried a lot of combination but loki seem to do care of the timestamp of the log.
lorenzo gardella is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.