<source>
  @type forward
  port 24224
  bind 0.0.0.0
</source>

<filter docker.**>
  @type parser
  key_name log
  reserve_data true
  <parse>
    @type regexp
    expression /^(?<message>.*)\b(SIGTERM|SEVERE ERROR|FATAL|CRITICAL)\b/i
  </parse>
</filter>

<match docker.**>
  @type copy  # Introduce a 'copy' stage

  # Original output
  <store>
    @type exec
    command "/go-glitch"
    <buffer>
      flush_interval 10s
    </buffer>
    <format>
      @type json
    </format>
    run_interval 10s
  </store>

  # Graylog output
  <store>
    @type gelf
    host graylog_server_hostname  # Replace with your Graylog server's hostname
    port 12201                    # Standard GELF port
  </store>
</match>