Send journald logs to loki. Not sure if working yet.

services/vector.hcl

@@ -15,11 +15,14 @@ job "vector" {
     task "vector" {
       driver = "docker"
       config {
-        image = "timberio/vector:0.28.X-alpine"
+        # debian instead of alpine to get journalctl
+        image = "timberio/vector:0.31.X-debian"
         ports = ["api"]
         volumes = [
           "/var/run/docker.sock:/var/run/docker.sock:ro",
           "/var/log/glusterfs:/var/log/glusterfs:ro",
+          "/var/log/journal:/var/log/journal:ro",
+          "/etc/machine-id:/etc/machine-id:ro",
         ]
       }
 
@@ -84,6 +87,9 @@ if length(result) > 0 {
             include = [ "/var/log/glusterfs/**/*.log" ]
             host_key = "node"
 
+          [sources.journald_raw]
+            type = "journald"
+
           [transforms.nomadify_hostname]
             type = "remap"
             inputs = [
@@ -98,7 +104,8 @@ if length(result) > 0 {
             type = "loki"
             inputs = [
               "docker_transformed",
-              "nomadify_hostname"
+              "nomadify_hostname",
+              "journald_raw",
             ]
             endpoint = "http://[[ range service "loki" ]][[ .Address ]]:[[ .Port ]][[ end ]]"
             encoding.codec = "json"