wildcard does not capture logs

[adelbordbari]

this is my fluent.conf:

<source>
        @type udp
        port 514
        tag vpn.logs
        format none
</source>
<match vpn.logs>
        @type stdout
</match>

after running fluentd, this leads to nothing, I don't see any output (except fluent's own debug logs ofc)
I am certainly receiving logs on udp port 514 (tcpdump output's as expected).

the surprise is that when I change the matching tag to *.*, I can see the expected outputs, but neither *.logs nor vpn.* work! (and also not vpn.logs, as mentioned above)

why is this? and how can I actually have my desired tag (vpn.logs)?

[daipom]

I can see the output with the config.

<source>
        @type udp
        tag vpn.logs
        format none
</source>
<match vpn.logs>
        @type stdout
</match>

$ echo "hello world" | nc -u 0.0.0.0 5160

2024-09-09 13:08:59 +0900 [info]: init supervisor logger path=nil rotate_age=nil rotate_size=nil
2024-09-09 13:08:59 +0900 [info]: parsing config file is succeeded path="/test/fluentd/config/tmp/1.conf"
2024-09-09 13:08:59 +0900 [info]: gem 'fluentd' version '1.17.1'
2024-09-09 13:09:00 +0900 [info]: using configuration file: <ROOT>
  <source>
    @type udp
    tag "vpn.logs"
    format none
    <parse>
      @type none
    </parse>
  </source>
  <match vpn.logs>
    @type stdout
  </match>
</ROOT>
2024-09-09 13:09:00 +0900 [info]: starting fluentd-1.17.1 pid=331015 ruby="3.2.2"
2024-09-09 13:09:00 +0900 [info]: spawn command to main:  cmdline=["/home/daipom/.rbenv/versions/3.2.2/bin/ruby", "-r/home/daipom/.rbenv/versions/3.2.2/lib/ruby/site_ruby/3.2.0/bundler/setup", "-Eascii-8bit:ascii-8bit", "/home/daipom/.rbenv/versions/3.2.2/lib/ruby/gems/3.2.0/bin/fluentd", "-c", "/test/fluentd/config/tmp/1.conf", "--under-supervisor"]
2024-09-09 13:09:00 +0900 [info]: #0 init worker0 logger path=nil rotate_age=nil rotate_size=nil
2024-09-09 13:09:00 +0900 [info]: adding match pattern="vpn.logs" type="stdout"
2024-09-09 13:09:00 +0900 [info]: adding source type="udp"
2024-09-09 13:09:00 +0900 [info]: #0 starting fluentd worker pid=331035 ppid=331015 worker=0
2024-09-09 13:09:00 +0900 [info]: #0 listening udp socket bind="0.0.0.0" port=5160
2024-09-09 13:09:00 +0900 [info]: #0 fluentd worker is now running worker=0
2024-09-09 13:09:47.096666266 +0900 vpn.logs: {"message":"hello world"}