Questions tagged [efk]

121 questions
7
votes
3 answers

EFK system is build on docker but fluentd can't start up

I want to build the efk logger system by docker compose. Everything is setup, only fluentd has problem. fluentd docker container logs 2022-02-15 02:06:11 +0000 [info]: parsing config file is succeeded path="/fluentd/etc/fluent.conf" 2022-02-15…
Henry Kao
  • 88
  • 1
  • 6
7
votes
1 answer

How to configure FluentD (EFK) with Filebeat?

I have configured ELK-stack (Elasticsearch, Logstash, and Kibana) cluster for centralized logging system with Filebeat. Now I have been asked to reconfigure to EFK (Elasticsearch, FluentD, and Kibana) with Filebeat. I have disabled the Logstash and…
rolz
  • 591
  • 2
  • 11
  • 23
7
votes
1 answer

Can't log from (fluentd) logdriver using service name in compose

I have the following setup in docker: Application (httpd) Fluentd ElasticSearch Kibana The configuration of the logdriver of the application is describing the fluentd container. The logs will be saved in ES and shown in Kibana. When the logdriver…
lvthillo
  • 28,263
  • 13
  • 94
  • 127
6
votes
1 answer

How to get different application logs to Elasticsearch using fluentd in kubernetes

I am using fluentd daemonset to get kubernetes logs to Elasticsearch/Kibana which is working fine. Now the problem is that there are 3 4 application running in kubernetes which have different log pattern, these are running in pods and pods are…
drishti ahuja
  • 1,379
  • 2
  • 15
  • 26
4
votes
2 answers

fluentd elasticsearch plugin - The client is unable to verify that the server is Elasticsearch

I want to send some nginx logs from fluentd to elasticsearch , however, fluentd is unable to start due to following error message: The client is unable to verify that the server is Elasticsearch. Some functionality may not be compatible if the…
rugby2312
  • 1,056
  • 1
  • 10
  • 15
4
votes
1 answer

Fluent Bit 1.8+ and MULTILINE_PARSER

My goal is to collect logs from Java (Spring Boot) applications running on Bare Kubernetes. These logs are then translated into ES and visualized in Kibana. For these purposes I deployed Fleunt Bit 1.8.9 via Kubernetes 1.22. Since I use Containerd…
Maksim
  • 197
  • 2
  • 12
4
votes
1 answer

Fluentd - How to parse logs whose messages are JSON formatted parsed AND whose messages are in text; as is without getting lost due to parse error

I have certain log messages from certain services that are in JSON format; and then this fluentd filter is able to parse that properly. However with this; it discards all other logs from other components whose message field is not proper JSON. …
Alex Punnen
  • 5,287
  • 3
  • 59
  • 71
4
votes
0 answers

Fluentd stop sending logs to elasticsearch after a few hours

I have a simple Fluentd-Elasticsearch-Kibana setup which has a very strange behaviour. Fluentd seems to stop sending information to elastic search after 3 hours it is up. I run everything in a simple docker-compose file version:…
Lucas Coppio
  • 328
  • 2
  • 12
3
votes
1 answer

FluentD forward logs from kafka to another fluentD

I need to send my application logs into a FluentD which is part of an EFK service. so I tried to config another FluentD to do that. my-fluent.conf: @type kafka_group consumer_group cgrp brokers "#{ENV['KAFKA_BROKERS']}" …
Sina
  • 1,055
  • 11
  • 24
3
votes
1 answer

How to install Fluentd plugins on k8s

I have set up EFK on Kubernetes, currently I have access only to logs from logstash but wondering how can I install some plugins for Fluentd in order to get some logs from eg. NGINX which I use as a reverse proxy? Can someone please point me how…
camel
  • 1,233
  • 2
  • 12
  • 18
3
votes
1 answer

K8S EFK (especially Fluentd) daemonset for docker journald logging driver

Question Are there known available Fluentd daemonset for journald docker logging driver so that I can send K8S pod logs to Elasticsearch? Background As in add support to log in kubeadm, the default logging driver for K8S installed by kubeadm is…
mon
  • 18,789
  • 22
  • 112
  • 205
2
votes
1 answer

Is it possible to redirect NATs Jetstream message to Elastic search

We use Nats jetstream for message distribution. I want to display messages delivered to Nats in UI. All message have pre defined common structure. Do we have file beat or logstash plugin to read the content (message) of NATS and redirect to ES. Or…
defender
  • 353
  • 2
  • 11
2
votes
1 answer

How to optimize memory and heap usage Single node Elastic Search

I have a single node elastic search cluster. It is receiving logs from the Kubernetes cluster through Rancher (which runs fluentd pods on k8s to collect the logs). I am running elasticsearch as a service on centos 7 and have provided 12 gb of JVM…
avadhut007
  • 332
  • 3
  • 16
2
votes
2 answers

Fluent Bit Filter to convert Unix Epoch timestamp to human readable time format

I have a Java application in which I am using Log4j2 to print Logs in JSONLayout, here is a sample of the logs format: { "thread": "TopicStatusThreadPool-thread-1", "level": "INFO", "loggerName": "My Kafka Logger", "message": "Topic…
iamabhishek
  • 437
  • 6
  • 17
2
votes
0 answers

Why Fluentd-elasticsearch cannot send logs to elasticsearch?

I have deployed EFK stack on Kubernetes and I get following error messages and looks like Fluentd cannot communicate with elasticsearch. [warn]: [elasticsearch] Could not communicate to Elasticsearch, resetting connection and trying again.…
kishorK
  • 453
  • 2
  • 7
  • 16
1
2 3
8 9