1
0
mirror of https://github.com/openshift/openshift-docs.git synced 2026-02-05 12:46:18 +01:00

v6.0 Forwarding to Red Hat Managed Elasticsearch is broken

- v6.0 Forwarding to Red Hat Managed Elasticsearch is broken
- Here is the documentation link:
  https://docs.openshift.com/container-platform/4.16/observability/logging/logging-6.0/log6x-upgrading-to-6.html#red-hat-managed-elasticsearch

- Here entire example for `v6.0 Forwarding to Red Hat Managed Elasticsearch` is wrongly mentioned.
- For correct format kindly refer to KCS: https://access.redhat.com/solutions/7105074

- We need to correct this configuration in the documentation as well.
- Here is the updated `ClusterLogForwarder` configuration:

~~~
apiVersion: observability.openshift.io/v1
kind: ClusterLogForwarder
metadata:
  name: collector
  namespace: openshift-logging
spec:
  serviceAccount:
    name: <service_account_name>
  managementState: Managed
  outputs:
  - name: audit-elasticsearch
    type: elasticsearch
    elasticsearch:
      url: https://elasticsearch:9200
      version: 6
      index: audit-write
    tls:
      ca:
        key: ca-bundle.crt
        secretName: collector
      certificate:
        key: tls.crt
        secretName: collector
      key:
        key: tls.key
        secretName: collector
  - name: app-elasticsearch
    type: elasticsearch
    elasticsearch:
      url: https://elasticsearch:9200
      version: 6
      index: app-write
    tls:
      ca:
        key: ca-bundle.crt
        secretName: collector
      certificate:
        key: tls.crt
        secretName: collector
      key:
        key: tls.key
        secretName: collector
  - name: infra-elasticsearch
    type: elasticsearch
    elasticsearch:
      url: https://elasticsearch:9200
      version: 6
      index: infra-write
    tls:
      ca:
        key: ca-bundle.crt
        secretName: collector
      certificate:
        key: tls.crt
        secretName: collector
      key:
        key: tls.key
        secretName: collector
  pipelines:
  - name: app
    inputRefs:
    - application
    outputRefs:
    - app-elasticsearch
  - name: audit
    inputRefs:
    - audit
    outputRefs:
    - audit-elasticsearch
  - name: infra
    inputRefs:
    - infrastructure
    outputRefs:
    - infra-elasticsearch
~~~
This commit is contained in:
Prithviraj Patil
2025-03-11 03:24:22 +05:30
committed by openshift-cherrypick-robot
parent eca2375d83
commit 82aee9439d

View File

@@ -251,13 +251,48 @@ metadata:
name: instance
namespace: openshift-logging
spec:
serviceAccount:
name: <service_account_name>
managementState: Managed
outputs:
- name: default-elasticsearch
- name: audit-elasticsearch
type: elasticsearch
elasticsearch:
url: https://elasticsearch:9200
version: 6
index: <log_type>-write-{+yyyy.MM.dd}
index: audit-write
tls:
ca:
key: ca-bundle.crt
secretName: collector
certificate:
key: tls.crt
secretName: collector
key:
key: tls.key
secretName: collector
- name: app-elasticsearch
type: elasticsearch
elasticsearch:
url: https://elasticsearch:9200
version: 6
index: app-write
tls:
ca:
key: ca-bundle.crt
secretName: collector
certificate:
key: tls.crt
secretName: collector
key:
key: tls.key
secretName: collector
- name: infra-elasticsearch
type: elasticsearch
elasticsearch:
url: https://elasticsearch:9200
version: 6
index: infra-write
tls:
ca:
key: ca-bundle.crt
@@ -269,18 +304,23 @@ spec:
key: tls.key
secretName: collector
pipelines:
- outputRefs:
- default-elasticsearch
- inputRefs:
- name: app
inputRefs:
- application
outputRefs:
- app-elasticsearch
- name: audit
inputRefs:
- audit
outputRefs:
- audit-elasticsearch
- name: infra
inputRefs:
- infrastructure
outputRefs:
- infra-elasticsearch
----
[NOTE]
====
In this example, application logs are written to the `application-write` alias/index instead of `app-write`.
====
== Red Hat Managed LokiStack
.v5.9 Forwarding to Red Hat Managed LokiStack