mirror of
https://github.com/openshift/openshift-docs.git
synced 2026-02-05 12:46:18 +01:00
50 lines
2.5 KiB
Plaintext
50 lines
2.5 KiB
Plaintext
:_mod-docs-content-type: ASSEMBLY
|
|
include::_attributes/common-attributes.adoc[]
|
|
include::_attributes/attributes-openshift-dedicated.adoc[]
|
|
[id="log-forwarding"]
|
|
= About log collection and forwarding
|
|
:context: log-forwarding
|
|
|
|
toc::[]
|
|
|
|
The {clo} deploys a collector based on the `ClusterLogForwarder` resource specification. There are two collector options supported by this Operator: the legacy Fluentd collector, and the Vector collector.
|
|
|
|
include::snippets/logging-fluentd-dep-snip.adoc[]
|
|
|
|
include::modules/about-log-collection.adoc[leveloffset=+1]
|
|
|
|
include::modules/logging-vector-fluentd-feature-comparison.adoc[leveloffset=+2]
|
|
|
|
include::modules/log-forwarding-collector-outputs.adoc[leveloffset=+2]
|
|
|
|
[id="log-forwarding-about-clf"]
|
|
== Log forwarding
|
|
|
|
Administrators can create `ClusterLogForwarder` resources that specify which logs are collected, how they are transformed, and where they are forwarded to.
|
|
|
|
`ClusterLogForwarder` resources can be used up to forward container, infrastructure, and audit logs to specific endpoints within or outside of a cluster. Transport Layer Security (TLS) is supported so that log forwarders can be configured to send logs securely.
|
|
|
|
Administrators can also authorize RBAC permissions that define which service accounts and users can access and forward which types of logs.
|
|
|
|
include::modules/log-forwarding-implementations.adoc[leveloffset=+2]
|
|
|
|
[id="log-forwarding-enabling-multi-clf-feature"]
|
|
=== Enabling the multi log forwarder feature for a cluster
|
|
|
|
To use the multi log forwarder feature, you must create a service account and cluster role bindings for that service account. You can then reference the service account in the `ClusterLogForwarder` resource to control access permissions.
|
|
|
|
[IMPORTANT]
|
|
====
|
|
In order to support multi log forwarding in additional namespaces other than the `openshift-logging` namespace, you must update the {clo} to watch all namespaces]. This functionality is supported by default in new {clo} version 5.8 installations.
|
|
====
|
|
|
|
include::modules/log-collection-rbac-permissions.adoc[leveloffset=+3]
|
|
|
|
[role="_additional-resources"]
|
|
.Additional resources
|
|
ifdef::openshift-enterprise[]
|
|
* xref:../../../authentication/using-rbac.adoc#using-rbac[Using RBAC to define and apply permissions]
|
|
* xref:../../../authentication/using-service-accounts-in-applications.adoc#using-service-accounts-in-applications[Using service accounts in applications]
|
|
endif::[]
|
|
* link:https://kubernetes.io/docs/reference/access-authn-authz/rbac/[Using RBAC Authorization Kubernetes documentation]
|