119. 使用 Fluentd concat 过滤器插件在牧场日志中串接多行日志

Logs of multiple lines are separated across multiple log events within Pod logs and there is a need to combine them into a single event before forwarding them to a logging solution.
多行日志在 Pod 日志中被分隔在多个日志事件中，因此需要将它们合并为单一事件，然后再转发到日志解决方案。

The rancher-logging operator provides a wide range of Fluentd filter plugins. The concat filter can be used to concatenate multiline logs into a single event.
牧场记录操作员提供了多种 Fluentd 滤波插件 。concat 过滤器可用于将多行日志串接成单一事件。

Filters are defined in a Cluster or ClusterFlow, per the example below:
过滤器定义在集群或集群流中，示例如下：

<span style="color:#000000"><span style="background-color:#ffffff"><span style="background-color:#efefef"><code>spec: filters: - concat: flush_interval: 10 multiline_start_regexp: /\d{4}-\d{1,2}-\d{1,2}/ use_first_timestamp: true</code></span></span></span>

Users should refer to the Fluentd concat filter plugin documentation, as well as the kube-logging documentation, to determine the appropriate concat filter parameters to concatenate their application logs.
用户应参考 Fluentd concat 过滤器插件文档以及 kube-logging 文档 ，以确定合适的 concat 过滤器参数以串接他们的应用日志。