카테고리 없음

supervisor fluentbit 설정

moonee 2025. 11. 30. 13:19
apiVersion: v1
data:
  fluent-bit.conf: |
    [SERVICE]
        Flush         1
        Log_Level     error
        Daemon        off
        Parsers_File  parsers.conf
        Plugins_File  plugins.conf

    [INPUT]
        Name              tail
        Tag               kube.*
        Path              /var/log/containers/*.log
        Parser            docker
        DB                /var/log/vmware/fluentbit/flb_kube.db
        Buffer_Max_Size   12MBb
        Mem_Buf_Limit     32MB
        Skip_Long_Lines   On
        Refresh_Interval  10

    [INPUT]
        Name                systemd
        Tag                 systemd.*
        Path                /var/log/journal
        Systemd_Filter      _SYSTEMD_UNIT=kubelet.service
        DB                  /var/log/vmware/fluentbit/flb_systemd.db
        Read_From_Tail      Off

    [FILTER]
        Name                kubernetes
        Match               kube.*
        Kube_URL            https://localhost:6443
        # enable tls.verify
        tls.verify          Off
        K8S-Logging.Parser  On
        K8S-Logging.Exclude On
        Kube_Tag_Prefix     kube.var.log.containers.

    [FILTER]
        Name           record_modifier
        Match          systemd.*
        Whitelist_key  _CMDLINE
        Whitelist_key  _EXE
        Whitelist_key  _HOSTNAME
        Whitelist_key  _PID
        Whitelist_key  MESSAGE
        Whitelist_key  SYSLOG_IDENTIFIER

    [FILTER]
        Name    modify
        Match   systemd.*
        Rename  _CMDLINE cmdline
        Rename  _EXE exe
        Rename  _HOSTNAME hostname
        Rename  _PID pid
        Rename  SYSLOG_IDENTIFIER unit
        Rename  MESSAGE log

    [OUTPUT]
        Name            file
        Match           *
        Path            /var/log/vmware/fluentbit
        File            consolidated.log

    [OUTPUT]
        Name            file
        Match           kube.var.log.containers.nsx*
        Path            /var/log/vmware/fluentbit
        File            nsx-ncp.log
### 이부분 추가  ##
    [OUTPUT]
        Name           syslog
        Match          *
        Host           [log-insight-ip]
        Port           514
        Mode           udp
        Syslog_Format          rfc5424
        syslog_message_key     log
        syslog_hostname_preset ${HOSTNAME}
        syslog_appname_preset  fluent-bit

    ### Do not modify the name of the markers below, they are used in support/install/kube-online-cluster.sh and support/install/update-controller/vmware_logging.py
    # BEGIN ELASTICSEARCH OUTPUT
    # END ELASTICSEARCH OUTPUT

    # [OUTPUT]
    #     name           syslog
    #     match          *
    #     host           <LOGGING_FLUENTBIT_RSYSLOG>
    #     InstanceName   rsyslog
    #     Cluster        true
  parsers.conf: |
    [PARSER]
        Name              docker
        Format            json
        Time_Key          time
        Time_Format       %Y-%m-%dT%H:%M:%S.%L
        Decode_Field_As   escaped_utf8  log

    [PARSER]
        Name          json
        Format        json
        Time_Key      time
        Time_Format   %d/%b/%Y:%H:%M:%S %z