Questions tagged [fluentd]

Fluentd is open-source and distributed data collector, which receives logs in JSON format, buffers them, and sends them to other systems like Amazon S3, MongoDB, Hadoop, Loki(Grafana system) or other Fluentds.

1336 questions
7
votes
2 answers

How to configure fluentd daemonset for RBAC

Issue The fluentd daemonset manifest in Kubernetes Logging with Fluentd will cause an authorization error if RBAC is enabled. $ kubectl logs fluentd-4nzv7 -n kube-system 2018-01-06 11:28:10 +0000 [info]: reading config file…
mon
  • 18,789
  • 22
  • 112
  • 205
7
votes
1 answer

How to configure FluentD (EFK) with Filebeat?

I have configured ELK-stack (Elasticsearch, Logstash, and Kibana) cluster for centralized logging system with Filebeat. Now I have been asked to reconfigure to EFK (Elasticsearch, FluentD, and Kibana) with Filebeat. I have disabled the Logstash and…
rolz
  • 591
  • 2
  • 11
  • 23
7
votes
0 answers

Fluentd: Event forwarding to Elasticsearch taking long when using copy plugin

I am setting up my fluentD configuration and for certain events, I need to push them to both loggly and elasticsearch. I am using copy plugin for that but see a considerable difference in the time taken by the fluentD call to return - time taken by…
labyrinth
  • 1,104
  • 3
  • 11
  • 32
7
votes
1 answer

Can't log from (fluentd) logdriver using service name in compose

I have the following setup in docker: Application (httpd) Fluentd ElasticSearch Kibana The configuration of the logdriver of the application is describing the fluentd container. The logs will be saved in ES and shown in Kibana. When the logdriver…
lvthillo
  • 28,263
  • 13
  • 94
  • 127
7
votes
3 answers

Fluentd Elasticsearch target index

I'm using Fluentd to transfer the data into Elasticsearch. td-agent.conf ## ElasticSearch type elasticsearch target_index_key @target_index logstash_format true flush_interval 5s Elasticsearch index :…
Nimit
  • 1,714
  • 3
  • 22
  • 33
7
votes
1 answer

Tail multiple logs fluentd

I'm trying to tail multiple logs in fluentd with the following configuration: type tail tag es.workers.worker1 format /^\[(?.*? .*?) (?[INFO|ERROR][^\]]*)\] (?.*)$/ path…
user1427661
  • 11,158
  • 28
  • 90
  • 132
7
votes
3 answers

Fluentd to Logstash output plugin

I am trying to read from the scribe server using flunetd and output those logs to be stored in logstash for now. I know it's very stupid to log the scribe_central logs to another central logger, but we need this to be done in our current…
user3195649
  • 437
  • 1
  • 6
  • 11
6
votes
3 answers

Kubernetes: Install Fluentd to a namespace only

I got the fluentd-kubernetes-daemonset charts from https://github.com/fluent/fluentd-kubernetes-daemonset, and deployed fluentd into kube-system namespace as daemonset. It sends entire cluster logs to elasticsearch. We deploy our csc application in…
Melissa Jenner
  • 781
  • 1
  • 8
  • 31
6
votes
3 answers

fluentd not parsing JSON log file entry

I've seen a number of similar questions on Stackoverflow, including this one. But none address my particular issue. The application is deployed in a Kubernetes (v1.15) cluster. I'm using a docker image based on the fluent/fluentd-docker-image GitHub…
Rich
  • 658
  • 1
  • 9
  • 18
6
votes
1 answer

Fluentd error: “buffer space has too many data”

I'm using fluentd in my kubernetes cluster to collect logs from the pods and send them to the elasticseach. Once a day or two the fluetnd gets the error: [warn]: #0 emit transaction failed: error_class=Fluent::Plugin::Buffer::BufferOverflowError…
Or Nahum
  • 173
  • 1
  • 1
  • 5
6
votes
1 answer

Why elastic-search container memory usage keeps increasing with little use?

I have deployed Elastic-search container in aws using eks kubernetes cluster. The memory usage of the container keeps increasing even though there are only 3 indices and not used heavily. I am dumping cluster container logs into elastic search using…
Nitesh
  • 1,067
  • 1
  • 10
  • 19
6
votes
1 answer

How to get different application logs to Elasticsearch using fluentd in kubernetes

I am using fluentd daemonset to get kubernetes logs to Elasticsearch/Kibana which is working fine. Now the problem is that there are 3 4 application running in kubernetes which have different log pattern, these are running in pods and pods are…
drishti ahuja
  • 1,379
  • 2
  • 15
  • 26
6
votes
0 answers

Log collection from Android devices

I've been reading recently about Fluentd and Fluent-bit as tools for log unifying and collection. The documentation says it supports a few Linux distributions but I couldn't find any reference to Android - either that it is supported or not…
DannyL
  • 505
  • 4
  • 10
6
votes
1 answer

Is it possible to use stdout as a fluentd source to capture specific logs for write to elasticsearch?

I'm a noob to both fluentd and elasticsearch, and I'm wondering if it's possible for fluentd to capture specific logs (in this case, custom audit logs generated by our apps) from stdout - use stdout as a source - and write them to a specific index…
RatTerriers
  • 61
  • 1
  • 3
6
votes
1 answer

OpenShift Aggregated Logging: Parse Apache access log

When using OpenShift Aggregated Logging I get logs nicely fed into elasticsearch. However, the line as logged by apache ends up in a message field. I'd like to create queries in Kibana where I can access the url, the status code and other fields…
Niko Sams
  • 4,304
  • 3
  • 25
  • 44
1 2
3
88 89