Ingesting logs from ubuntu server\Kubernetes Node to Graylog

I am trying to ingest logs from Azure Kubernetes node to Graylog, Below is the Filebeat configuration on Kubernetes node.

problem: Apart from container logs I am able to see all the other logs, please let me know if am missing anything.

Note: Kubernetes Node OS- Ubuntu 18.04

Hello,

Maybe I can help.

How is your environment setup configured?

I’m not sure exactly what the issue is, could you describe whats going on in greater detail?

@docgyan I’m curious about the need to repost this. I’d noted in your previous post, Ingesting AKS(Azure Kubernetes Services) logs to Graylog - #2 by aaronsachs, that you’re probably going to need some other application (like FluentD) to ship container logs.

Are you running filebeat on the OS itself, or are you running it as a container? Can you provide the full filebeat configuration please?

I was trying both running on OS and having a container, I came across the below link and got the useful code:
https://raw.githubusercontent.com/elastic/beats/7.13/deploy/kubernetes/filebeat-kubernetes.yaml

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.