apiVersion: v1
data:
fluent-bit.conf: |
[SERVICE]
Flush 1
Log_Level error
Daemon off
Parsers_File parsers.conf
Plugins_File plugins.conf
[INPUT]
Name tail
Tag kube.*
Path /var/log/containers/*.log
Parser docker
DB /var/log/vmware/fluentbit/flb_kube.db
Buffer_Max_Size 12MBb
Mem_Buf_Limit 32MB
Skip_Long_Lines On
Refresh_Interval 10
[INPUT]
Name systemd
Tag systemd.*
Path /var/log/journal
Systemd_Filter _SYSTEMD_UNIT=kubelet.service
DB /var/log/vmware/fluentbit/flb_systemd.db
Read_From_Tail Off
[FILTER]
Name kubernetes
Match kube.*
Kube_URL https://localhost:6443
# enable tls.verify
tls.verify Off
K8S-Logging.Parser On
K8S-Logging.Exclude On
Kube_Tag_Prefix kube.var.log.containers.
[FILTER]
Name record_modifier
Match systemd.*
Whitelist_key _CMDLINE
Whitelist_key _EXE
Whitelist_key _HOSTNAME
Whitelist_key _PID
Whitelist_key MESSAGE
Whitelist_key SYSLOG_IDENTIFIER
[FILTER]
Name modify
Match systemd.*
Rename _CMDLINE cmdline
Rename _EXE exe
Rename _HOSTNAME hostname
Rename _PID pid
Rename SYSLOG_IDENTIFIER unit
Rename MESSAGE log
[OUTPUT]
Name file
Match *
Path /var/log/vmware/fluentbit
File consolidated.log
[OUTPUT]
Name file
Match kube.var.log.containers.nsx*
Path /var/log/vmware/fluentbit
File nsx-ncp.log
### 이부분 추가 ##
[OUTPUT]
Name syslog
Match *
Host [log-insight-ip]
Port 514
Mode udp
Syslog_Format rfc5424
syslog_message_key log
syslog_hostname_preset ${HOSTNAME}
syslog_appname_preset fluent-bit
### Do not modify the name of the markers below, they are used in support/install/kube-online-cluster.sh and support/install/update-controller/vmware_logging.py
# BEGIN ELASTICSEARCH OUTPUT
# END ELASTICSEARCH OUTPUT
# [OUTPUT]
# name syslog
# match *
# host <LOGGING_FLUENTBIT_RSYSLOG>
# InstanceName rsyslog
# Cluster true
parsers.conf: |
[PARSER]
Name docker
Format json
Time_Key time
Time_Format %Y-%m-%dT%H:%M:%S.%L
Decode_Field_As escaped_utf8 log
[PARSER]
Name json
Format json
Time_Key time
Time_Format %d/%b/%Y:%H:%M:%S %z