Upgrade FluentBit version & support new date format

- Upgrade FluentBit image to 2.1.9
- Add support for decoding logs timestamps for newer versions(2.1+)
- Add more info regarding the timestamp that failed to parse

output/out_logzio.go

@@ -9,6 +9,7 @@ import (
 	"fmt"
 	"github.com/fluent/fluent-bit-go/output"
 	"os"
+	"reflect"
 	"regexp"
 	"strconv"
 	"time"
@@ -308,15 +309,24 @@ func parseJSON(record map[interface{}]interface{}, dedotEnabled bool, dedotNeste
 }
 func formatTimestamp(ts interface{}) time.Time {
 	var timestamp time.Time
+
 	switch t := ts.(type) {
 	case output.FLBTime:
 		timestamp = ts.(output.FLBTime).Time
 	case uint64:
 		timestamp = time.Unix(int64(t), 0)
 	case time.Time:
 		timestamp = ts.(time.Time)
+	case []interface{}:
+		s := reflect.ValueOf(t)
+		if s.Kind() != reflect.Slice || s.Len() < 2 {
+			// Expects a non-empty slice of length 2, so we won't extract a timestamp.
+		} else {
+			ts = s.Index(0).Interface() // First item is the timestamp.
+			timestamp = formatTimestamp(ts)
+		}
 	default:
-		fmt.Print("Unknown format, defaulting to now.\n")
+		fmt.Printf("Unknown format, defaulting to now, timestamp: %v of type: %T.\n", t, t)
 		timestamp = time.Now()
 	}
 	return timestamp

test/Dockerfile.amd

@@ -9,7 +9,7 @@ WORKDIR /go/src/logzio
 
 RUN make
 
-FROM fluent/fluent-bit:2.0.8
+FROM fluent/fluent-bit:2.1.9
 
 COPY --from=gobuilder /go/src/logzio/build/out_logzio.so /fluent-bit/bin/
 COPY --from=gobuilder /go/src/logzio/test/fluent-bit.conf /fluent-bit/etc/

test/Dockerfile.arm

@@ -9,7 +9,7 @@ WORKDIR /go/src/logzio
 
 RUN make
 
-FROM fluent/fluent-bit:2.0.8
+FROM fluent/fluent-bit:2.1.9
 
 COPY --from=gobuilder /go/src/logzio/build/out_logzio.so /fluent-bit/bin/
 COPY --from=gobuilder /go/src/logzio/test/fluent-bit.conf /fluent-bit/etc/