Configuring remote logging for a VMware deployment
Logging collection is required for IBM Support to assist with troubleshooting. You can configure fluent-bit to collect and forward logs to a remote Syslog server.
Before you begin
The fluent-bit service is already installed on the appliances and is configured to forward container logs to /var/log/syslog on the local machine.
About this task
Remote logs created with fluent-bit use the following format:
Mar 1 00:38:44 apicdev1147 calico-node-gqbv_42428a8ade169ad3 2023-03-01 00:38:44.684 [INFO][208] felix/int_dataplane.go 1245: Applying dataplane updates
Mar 1 00:38:44
is the time the log arrived on the remote server.apicdev1147
is the hostname of the log source.calico-node-gqbv_42428a8ade169ad3
is a portion of the pod name/container_id where the log is coming from.2023-03-01 00:38:44.684
is the timestamp at which the logged event actually took place within the container.- The rest of the log is the log message itself.
Logs posted to your local server look different, as in this example:
Feb 28 23:47:03 apicdev1147 fluent-bit[2332273]: [2] kube.var.log.containers.kqn2-management-portal-proxy-647b96b89f-pkz5w_default_portal-proxy-74a1723512574fdc23fb9c014b80c7e83aff225b9d44d995736251edd18c49b4.log: [1677628023.503190040, {"_p"=>"F", "log"=>"Tue, 28 Feb 2023 23:47:03 GMT express:router expressInit : /healthz", "tag"=>"kqn2-management-_74a1723512574fdc", "time"=>"2023-02-28T23:47:03.503190005Z", "stream"=>"stderr"}]
On the local log, the whole fluent-bit JSON object is logged, which provides slightly more information (for example, the full file name of the log file) than in the remote log.
Configuring remote logging
About this task
The fluent-bit service is already installed on the appliance and is
configured to forward container logs to /var/log/syslog
on the local machine. If
you want to change the output destination to a remote Syslog server,
complete the following steps:
Procedure
Updating the remote logging configuration
To update the fluent-bit configuration, complete the following steps: