anchor.diff:      pos_file /var/log/td-agent/ceph-daemons.pos
       tag pre.ceph.daemons
       format /^(?<time>[^ ]* [^ ]*) (?<offset>[^ ]*)[ ]*(?<level>[^ ]*) (?<message>.*)$/
  -    time_format %Y-%m-%e %H:%M:%S
  +    time_format %Y-%m-%d %H:%M:%S
   </source>
   
   <source>
  
positive.code:     pos_file /var/log/td-agent/openstack-nova.pos
      tag pre.openstack.nova
      format /^(?<time>[^ ]* [^ ]*)\s*(?<pid>([0-9]+)?)\s*(?<level>[a-zA-Z]*)\s*(?<ident>[^ ]*)\s*(\[.*\])?\s*(?<message>.*)$/
      time_format %Y-%m-%e %H:%M:%S
  </source>
  
  #[/var/lib/mysql/<%="#{node.hostname}"%>.err]
  #type: mysql
  #tags: mysql
  #
  #[/var/log/rabbitmq/rabbit@<%="#{node.hostname}"%>.log]
  #type: rabbitmq
  #tags: rabbitmq
  #
  #[/var/log/elasticsearch/<%="#{node[:bcpc][:region_name]}"%>.log]
  #type: elasticsearch
  #tags: logging
  #
  #[/var/log/kibana/kibana.log]
  #type: kibana
  #tags: logging
  #
  #[/var/log/logstash/logstash.log]
  #type: logstash
  #tags: logging
  #
  #[/var/log/beaver/beaver.log]
  #type: beaver
  #tags: logging
  #
  #[/var/log/diamond/diamond.log]
  #type: diamond
  #tags: metrics
  #
  #[/opt/graphite/storage/log/webapp/*.log]
  #type: graphite
  #tags: metrics
  
negative.code:     pos_file /var/log/td-agent/openstack-cinder.pos
      tag pre.openstack.cinder
      format /^(?<time>[^ ]* [^ ]*)\s*(?<level>[^ ]*) \[(?<ident>[^ ]*)\] (?<message>.*)$/
      time_format %Y-%m-%d %H:%M:%S
  </source>
  
  <source>
  