I’m using fluent-bit-plugin-loki to forward my K8S container logs into Loki, and querying via Grafana. The default config works great. I would like to add my K8S audit log into this config. I have added an INPUT section for it and a JSON parser. Where I am lost is the connection between the log and a Loki stream. To find any apps log, I can just use {app=“whatever”} since the labelmap pulls this info…when it comes to the audit log, do I need to apply a manual label in fluentbit so that I can find it in Grafana? Not sure how to get this working.
