@type forward port 24224 bind 0.0.0.0 @type parser key_name log reserve_data true expression /^(?.*)\b(SIGTERM|SEVERE ERROR|FATAL|CRITICAL)\b/i # Route 1: Errors to Glitchtip # Matches docker logs containing the severity terms @type exec command "/go-glitch" flush_interval 10s @type json run_interval 10s # Route 2: Unfiltered to stdout # Catch-all match for logs not matched by the error filter @type copy # Duplicate to prevent original event modification @type stdout