From 2f87f280fece7c844e4a21dd19ad0c9866cfa45a Mon Sep 17 00:00:00 2001
From: Jeremy Edwards <1312331+jeremyje@users.noreply.github.com>
Date: Fri, 14 May 2021 21:23:05 +0000
Subject: [PATCH] GCE Windows: Upgrade to fluent-bit 1.7.5

---
 cluster/gce/windows/k8s-node-setup.psm1 | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/cluster/gce/windows/k8s-node-setup.psm1 b/cluster/gce/windows/k8s-node-setup.psm1
index dd9da04ff6f..9d5b0c37305 100644
--- a/cluster/gce/windows/k8s-node-setup.psm1
+++ b/cluster/gce/windows/k8s-node-setup.psm1
@@ -1653,7 +1653,7 @@ function Install-Pigz {
 # TODO(pjh): move the logging agent code below into a separate
 # module; it was put here temporarily to avoid disrupting the file layout in
 # the K8s release machinery.
-$LOGGINGAGENT_VERSION = '1.7.3'
+$LOGGINGAGENT_VERSION = '1.7.5'
 $LOGGINGAGENT_ROOT = 'C:\fluent-bit'
 $LOGGINGAGENT_SERVICE = 'fluent-bit'
 $LOGGINGAGENT_CMDLINE = '*fluent-bit.exe*'
@@ -1876,7 +1876,7 @@ $FLUENTBIT_CONFIG = @'
     Interval_Sec 2
     # Channels Setup,Windows PowerShell
     Channels     application,system,security
-    Tag          winevent.raw
+    Tag          winevt.raw
     DB           /var/run/google-fluentbit/pos-files/winlog.db
 
 # Json Log Example:
@@ -1959,6 +1959,11 @@ $FLUENTBIT_CONFIG = @'
     Match       *
     Hard_rename log message
 
+[FILTER]
+    Name        modify
+    Match       winevt.raw
+    Hard_rename Message message
+
 [FILTER]
     Name         parser
     Match        kube_*