Kubernetes Sidecar DaemonSet

Graylog Central (peer support)
1

Hi,
I am looking for a DaemonSet log agent that will collect logs from the custom log file let’s say /etc/var/log/application/.* and push logs directly to a backend(Graylog servers). Can we use Sidecar DaemonSet that will run on each Kubernetes worker node and collect logs directly from custom path /etc/var/log/application/.*?

Currently, I am using FluentBit as a DaemonSet that collects the logs directly from the PODs, not from the custom path. And my requirement is to collect the logs only from the custom path.

Did anyone configure any DaemonSet to collect the logs from the custom path? If yes, please help me with the documentation or any reference link.

A quick response will be appreciated.

Thanks,

2

Hello @Tafsir_Alam

I have not, I collect the logs from my Docker container.

3

Thanks, @gsmith for the response.

4

Hi @gsmith Can you please let me know how you collect the logs from the docker container? is there any documentation that I can follow?
Thanks,

5

hey @Tafsir_Alam
I used Docker compose and added the logging section.

     - GRAYLOG_REPORT_RENDER_URI=http://10.10.10.10:9000
     - GRAYLOG_REPORT_USER=graylog-report
     - GRAYLOG_REPORT_RENDER_ENGINE_PORT=9515
    logging:
      driver: syslog
      options:
        syslog-address: "udp://10.10.10.22:51420"
        syslog-format: "rfc3164"
        tag: "asible"
    links:
      - mongodb:mongo
      - elasticsearch
    depends_on:
      - mongodb
      - elasticsearch
    ports:
      # Graylog web interface and REST API
      - 9000:9000
      # Syslog UDP
      - 51420:51420/udp
      # Syslog TCP
      - 8514:8514
      # Elasticsearch
      - 9200:9200
      - 9300:9300

Results:

image
image1747×321 33.7 KB

hope that helps

6

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.