The version just before this kinda worked.

docker/fluentd/fluent.conf

@@ -9,19 +9,19 @@
   key_name log
   reserve_data true
   <parse>
-    @type regexp
-    expression /^(?<message>.*\b(SIGTERM|ERROR|FATAL|CRITICAL|exception|failed|failure)\b.*)$/i
+    @type json  # Assuming logs are in JSON format
   </parse>
+  <rule>
+    key message
+    pattern /ERROR|FATAL|CRITICAL|exception|failed|failure/i
+    tag docker.errors
+  </rule>
 </filter>
 
-<match **>
+<match docker.errors>
   @type exec
   command "/go-glitch"
   <buffer>
     flush_interval 10s
   </buffer>
-  <format>
-    @type json
-  </format>
-  run_interval 10s
 </match>