<p>I have the EFK stack and want to add nginx log parses to fluentD in Openshift.
I read <a href="https://docs.fluentd.org/v1.0/articles/parser_nginx" rel="nofollow noreferrer">https://docs.fluentd.org/v1.0/articles/parser_nginx</a>
but I don't understand how to add a plugin in a daemon set. How is plugin added in fluentd to parse logs.</p>

Danny
<p>Thanks for attaching configmap and deployment yaml. Can you try below config.</p>

<p>From <a href="https://docs.fluentd.org/v1.0/articles/parser-plugin-overview" rel="nofollow noreferrer">Parser Plugin Overview</a>. They provided a simple example to get nginx logs.</p>

<pre><code>&lt;source&gt;
  @type tail
  path /path/to/input/file
  &lt;parse&gt;
    @type nginx
    keep_time_key true
  &lt;/parse&gt;
&lt;/source&gt;
</code></pre>

<p>Can you add above config in configmap and try. The <a href="https://docs.fluentd.org/v1.0/articles/parser_nginx" rel="nofollow noreferrer">nginx parser</a> is in-built, the link you provided is explanation of parser internals. If you don't like the way it is selecting/parsing, you can write your own.</p>

<p>Anyways, by using <code>@type</code> we can define type of parser we want. </p>

<p>PS: Right now I dont have any setup to test this. Also I have little knowledge in <code>fluentd</code> </p>

<p><strong>EDIT:</strong></p>

<p>I believe you already knew how <code>fluentd</code> is getting logs... In your pastebin link, at <code>volumeMounts</code> section, it mounting host's <code>/var/lib/docker/containers</code> which has all container meta data and logs, etc</p>
