Syslog Pluging -->failed to parse message data=

Hello world,

I would like to use Fluentd to collect the syslog messages and send them to Grafana/loki.
The way this has been documented: syslog - Fluentd, it does not work.
I get the following error message: failed to parse message data
I have tried very many configurations and also regexp kinds, none of them worked.
I look forward to any kind of support. Thank you!

P.s The server1 is linked to fluentd in docker-compose and can communicate with each other:

Workflow: server—syslog—> fluend ----syslog—> Grafna/loki
Os: Docker version 20.10.8, build 3967b7d
Fluentd: version ‘1.9.2’
Dockerfile image: grafana/fluent-plugin-loki:main

– Short-circuited my docker-compose file

fluentd:
container_name: fluentd
tty: true
restart: always
user: root
build:
context: ./fluentd/.
environment:
LOKI_URL: http://loki:3100
LOKI_USERNAME:
LOKI_PASSWORD:
TZ: Europe/Berlin
volumes:
- ./fluentd/conf/:/fluentd/etc/
- ./fluentd/logs:/output/
ports:
- “24224:24224”
- “24224:24224/udp”
- “9292:9292”
- “5140:5140”
networks:
- log-net

→ my fluent.conf file:

This source reads tail of a file

@include syslog_file_fluent.conf
##################################

→ my syslog_file_fluent.conf file:

´
@type syslog
port 5140
bind 0.0.0.0
tag syslog

with_priority true
@type regexp
time_format %Y-%m-%dT%H:%M:%S.%L%z
expression /^<(?[0-9]+)>(?[^ ]* {1,2}[^ ]* [^ ]) (?[^ ]) (?[^ :[])(?:[(?[0-9]+)])?(?:[^:]:)? (?.)$/

<match syslog.**>
@type stdout

→ fluentd logs from fleuntd container

Attaching to fluentd
fluentd | 2021-11-22 14:33:43 +0100 [info]: parsing config file is succeeded path="/fluentd/etc/fluent.conf"
fluentd | 2021-11-22 14:33:43 +0100 [info]: gem ‘fluentd’ version ‘1.9.2’
fluentd | 2021-11-22 14:33:43 +0100 [debug]: No fluent logger for internal event
fluentd | 2021-11-22 14:33:43 +0100 [info]: using configuration file:
fluentd |
fluentd | @type syslog
fluentd | port 5140
fluentd | bind “0.0.0.0”
fluentd | tag “syslog”
fluentd |
fluentd | with_priority true
fluentd | @type “regexp”
fluentd | time_format “%Y-%m-%dT%H:%M:%S.%L%z”
fluentd | expression /^<(?[0-9]+)>(?[^ ]* {1,2}[^ ]* [^ ]) (?[^ ]) (?[^ :[])(?:[(?[0-9]+)])?(?:[^:]:)? (?.)$/
fluentd |
fluentd |
fluentd | <match syslog.>
fluentd | @type stdout
fluentd |
fluentd |
fluentd | log_level debug
fluentd |
fluentd |
fluentd | 2021-11-22 14:33:43 +0100 [info]: starting fluentd-1.9.2 pid=8 ruby=“2.6.5”
fluentd | 2021-11-22 14:33:43 +0100 [info]: spawn command to main: cmdline=["/usr/local/bin/ruby", “-Eascii-8bit:ascii-8bit”,
“/usr/local/bundle/bin/fluentd”, “-c”, “/fluentd/etc/fluent.conf”, “-p”, “/fluentd/plugins”, “–under-supervisor”]
fluentd | 2021-11-22 14:33:44 +0100 [info]: adding match pattern="syslog.
" type=“stdout”
fluentd | 2021-11-22 14:33:44 +0100 [info]: adding source type=“syslog”
fluentd | 2021-11-22 14:33:44 +0100 [debug]: #0 No fluent logger for internal event
fluentd | 2021-11-22 14:33:44 +0100 [info]: #0 starting fluentd worker pid=18 ppid=8 worker=0
fluentd | 2021-11-22 14:33:44 +0100 [info]: #0 listening syslog socket on 0.0.0.0:5140 with udp
fluentd | 2021-11-22 14:33:44 +0100 [info]: #0 fluentd worker is now running worker=0
fluentd | 2021-11-22 14:33:55 +0100 [warn]: #0 failed to parse message data="<13>1 2021-11-22T14:33:55+01:00 4268b1f39cb0 root 215 - [meta sequenceId=“34”] <16>1 2013-02-28T12:00:00.003Z 192.168.0.1 fluentd 11111 ID24224 [exampleSDID@20224 iut=“3” eventSource=“Application” eventID=“11211”] Hi, from Fluentd!"

Best regards