<match app**>
  @type rewrite_tag_filter
  <rule>
    key log
    pattern /debug/
    tag logs.debug
  </rule>
  <rule>
    key log
    pattern /info/
    tag logs.info
  </rule>
  <rule>
    key log
    pattern /warn/
    tag logs.warn
  </rule>
  <rule>
    key log
    pattern /error/
    tag logs.error
  </rule>
  <rule>
    key log
    pattern /fatal/
    tag logs.fatal
  </rule>
</match>

<match **>
  @type cloudwatch_logs
  log_group_name rewrite-tag-example
  use_tag_as_stream true
  region ap-south-1
  auto_create_stream true
</match>