Fluentbit and GELF with TLS

Graylog Central (peer support)
1

I am trying to setup a logfwding to GELF with fluentBit and enable TLS.
I did the following:

  1. Created self signed certs and key
  2. Updated server.conf as mentioned in the doc
  3. Created a GELF tcp input (
    Screen Shot 2020-05-28 at 10.38.22 PM
    Screen Shot 2020-05-28 at 10.38.22 PM2682×870 213 KB
    )
  4. On the fluentBit side i enabled the tls.verify and tls.ca with the CA file i used to sign the server cert.

The flunetBit logs says API server connectivity ok , but the logs never reach GELF.

[2020/05/29 13:30:37] [ info] [filter:kubernetes:kubernetes.0] https=1 host=kubernetes.default.svc port=443
[2020/05/29 13:30:37] [ info] [filter:kubernetes:kubernetes.0] local POD info OK
[2020/05/29 13:30:37] [ info] [filter:kubernetes:kubernetes.0] testing connectivity with API server...
[2020/05/29 13:30:37] [ info] [filter:kubernetes:kubernetes.0] API server connectivity OK
[2020/05/29 13:30:37] [ info] [sp] stream processor started

If i disable tls , things work fine.

Any help would be much appreciated.

2

which doc?

I don’t find in your list the java keystore update, as in another doc mention.

What do you see in the Graylog’s log?

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.