Sending and Filtering Logs to Syslog Server

Elastic Stack Logstash
1

Hi,
I'm trying send logs to syslog server using output plugin but couldn't get any success. I want to send only certain pod logs and add the labels. Is this config accurate?

output {
  if [kubernetes][pod][name] =~ /^prod/  {
    syslog {
       host => "syslog server"
       port => 514
       protocol => "tcp"
       rfc => "rfc5424"
	   message => "Pod: %{[kubernetes][pod][name]}, Container: %{[kubernetes][container][name]}, Node: %{[kubernetes][node][name]}, Message: %{message}"
		}
	}
}
2

It looks reasonable. What isn't working? What appears in the logstash logs?

3

Also check the value [kubernetes][pod][name], does it start with "prod"