Logging Operator to support parsing of non-JSON messages in custom format

Posted on

We are currently running a number of on-prem OCP clusters (version 4.12) and exploring options to visualise log messages from our applications in a centralised place.

We have read the documentation of OpenShift's Logging subsystem and found the only parser supported by the Log Forwarding API is JSON:
- Enabling JSON log forwarding
- See also the source code of the CRD of ClusterLogForwarders. (The API is not listed in the API reference)

Would that be possible to define a generic log parser to handle some common log formats, for either EFK or the Loki stack comes with Logging 5.7?

Johnny Chien's picture

Responses