Jump To Close Expand all Collapse all Table of contents Logging 1. Release notes for Logging Expand section "1. Release notes for Logging" Collapse section "1. Release notes for Logging" 1.1. Logging 5.7.4 Expand section "1.1. Logging 5.7.4" Collapse section "1.1. Logging 5.7.4" 1.1.1. Bug fixes 1.1.2. CVEs 1.2. Logging 5.7.3 Expand section "1.2. Logging 5.7.3" Collapse section "1.2. Logging 5.7.3" 1.2.1. Bug fixes 1.2.2. CVEs 1.3. Logging 5.7.2 Expand section "1.3. Logging 5.7.2" Collapse section "1.3. Logging 5.7.2" 1.3.1. Bug fixes 1.3.2. CVEs 1.4. Logging 5.7.1 Expand section "1.4. Logging 5.7.1" Collapse section "1.4. Logging 5.7.1" 1.4.1. Bug fixes 1.4.2. CVEs 1.5. Logging 5.7.0 Expand section "1.5. Logging 5.7.0" Collapse section "1.5. Logging 5.7.0" 1.5.1. Enhancements 1.5.2. Known Issues 1.5.3. Bug fixes 1.5.4. CVEs 1.6. Logging 5.6.5 Expand section "1.6. Logging 5.6.5" Collapse section "1.6. Logging 5.6.5" 1.6.1. Bug fixes 1.6.2. CVEs 1.7. Logging 5.6.4 Expand section "1.7. Logging 5.6.4" Collapse section "1.7. Logging 5.6.4" 1.7.1. Bug fixes 1.7.2. CVEs 1.8. Logging 5.6.3 Expand section "1.8. Logging 5.6.3" Collapse section "1.8. Logging 5.6.3" 1.8.1. Bug fixes 1.8.2. CVEs 1.9. Logging 5.6.2 Expand section "1.9. Logging 5.6.2" Collapse section "1.9. Logging 5.6.2" 1.9.1. Bug fixes 1.9.2. CVEs 1.10. Logging 5.6.1 Expand section "1.10. Logging 5.6.1" Collapse section "1.10. Logging 5.6.1" 1.10.1. Bug fixes 1.10.2. CVEs 1.11. Logging 5.6 Expand section "1.11. Logging 5.6" Collapse section "1.11. Logging 5.6" 1.11.1. Deprecation notice 1.11.2. Enhancements 1.11.3. Known Issues 1.11.4. Bug fixes 1.11.5. CVEs 1.12. Logging 5.5.9 Expand section "1.12. Logging 5.5.9" Collapse section "1.12. Logging 5.5.9" 1.12.1. Bug fixes 1.12.2. CVEs 1.13. Logging 5.5.8 Expand section "1.13. Logging 5.5.8" Collapse section "1.13. Logging 5.5.8" 1.13.1. Bug fixes 1.13.2. CVEs 1.14. Logging 5.5.7 Expand section "1.14. Logging 5.5.7" Collapse section "1.14. Logging 5.5.7" 1.14.1. Bug fixes 1.14.2. CVEs 1.15. Logging 5.5.6 Expand section "1.15. Logging 5.5.6" Collapse section "1.15. Logging 5.5.6" 1.15.1. Bug fixes 1.15.2. CVEs 1.16. Logging 5.5.5 Expand section "1.16. Logging 5.5.5" Collapse section "1.16. Logging 5.5.5" 1.16.1. Bug fixes 1.16.2. CVEs 1.17. Logging 5.5.4 Expand section "1.17. Logging 5.5.4" Collapse section "1.17. Logging 5.5.4" 1.17.1. Bug fixes 1.17.2. CVEs 1.18. Logging 5.5.3 Expand section "1.18. Logging 5.5.3" Collapse section "1.18. Logging 5.5.3" 1.18.1. Bug fixes 1.18.2. CVEs 1.19. Logging 5.5.2 Expand section "1.19. Logging 5.5.2" Collapse section "1.19. Logging 5.5.2" 1.19.1. Bug fixes 1.19.2. CVEs 1.20. Logging 5.5.1 Expand section "1.20. Logging 5.5.1" Collapse section "1.20. Logging 5.5.1" 1.20.1. Enhancements 1.20.2. Bug fixes 1.20.3. CVEs 1.21. Logging 5.5 Expand section "1.21. Logging 5.5" Collapse section "1.21. Logging 5.5" 1.21.1. Enhancements 1.21.2. Bug fixes 1.21.3. CVEs 1.22. Logging 5.4.11 Expand section "1.22. Logging 5.4.11" Collapse section "1.22. Logging 5.4.11" 1.22.1. Bug fixes 1.22.2. CVEs 1.23. Logging 5.4.10 Expand section "1.23. Logging 5.4.10" Collapse section "1.23. Logging 5.4.10" 1.23.1. Bug fixes 1.23.2. CVEs 1.24. Logging 5.4.9 Expand section "1.24. Logging 5.4.9" Collapse section "1.24. Logging 5.4.9" 1.24.1. Bug fixes 1.24.2. CVEs 1.25. Logging 5.4.8 Expand section "1.25. Logging 5.4.8" Collapse section "1.25. Logging 5.4.8" 1.25.1. Bug fixes 1.25.2. CVEs 1.26. Logging 5.4.6 Expand section "1.26. Logging 5.4.6" Collapse section "1.26. Logging 5.4.6" 1.26.1. Bug fixes 1.26.2. CVEs 1.27. Logging 5.4.5 Expand section "1.27. Logging 5.4.5" Collapse section "1.27. Logging 5.4.5" 1.27.1. Bug fixes 1.27.2. CVEs 1.28. Logging 5.4.4 Expand section "1.28. Logging 5.4.4" Collapse section "1.28. Logging 5.4.4" 1.28.1. Bug fixes 1.28.2. CVEs 1.29. Logging 5.4.3 Expand section "1.29. Logging 5.4.3" Collapse section "1.29. Logging 5.4.3" 1.29.1. Elasticsearch Operator deprecation notice 1.29.2. Bug fixes 1.29.3. CVEs 1.30. Logging 5.4.2 Expand section "1.30. Logging 5.4.2" Collapse section "1.30. Logging 5.4.2" 1.30.1. Bug fixes 1.30.2. CVEs 1.31. Logging 5.4.1 Expand section "1.31. Logging 5.4.1" Collapse section "1.31. Logging 5.4.1" 1.31.1. Bug fixes 1.31.2. CVEs 1.32. Logging 5.4 Expand section "1.32. Logging 5.4" Collapse section "1.32. Logging 5.4" 1.32.1. Technology Previews 1.32.2. About Vector Expand section "1.32.2. About Vector" Collapse section "1.32.2. About Vector" 1.32.2.1. Enabling Vector 1.32.3. About Loki Expand section "1.32.3. About Loki" Collapse section "1.32.3. About Loki" 1.32.3.1. Deploying the Lokistack 1.32.4. Bug fixes 1.32.5. CVEs 1.33. Logging 5.3.14 Expand section "1.33. Logging 5.3.14" Collapse section "1.33. Logging 5.3.14" 1.33.1. Bug fixes 1.33.2. CVEs 1.34. Logging 5.3.13 Expand section "1.34. Logging 5.3.13" Collapse section "1.34. Logging 5.3.13" 1.34.1. Bug fixes 1.34.2. CVEs 1.35. Logging 5.3.12 Expand section "1.35. Logging 5.3.12" Collapse section "1.35. Logging 5.3.12" 1.35.1. Bug fixes 1.35.2. CVEs 1.36. Logging 5.3.11 Expand section "1.36. Logging 5.3.11" Collapse section "1.36. Logging 5.3.11" 1.36.1. Bug fixes 1.36.2. CVEs 1.37. Logging 5.3.10 Expand section "1.37. Logging 5.3.10" Collapse section "1.37. Logging 5.3.10" 1.37.1. Bug fixes 1.37.2. CVEs 1.38. Logging 5.3.9 Expand section "1.38. Logging 5.3.9" Collapse section "1.38. Logging 5.3.9" 1.38.1. Bug fixes 1.38.2. CVEs 1.39. Logging 5.3.8 Expand section "1.39. Logging 5.3.8" Collapse section "1.39. Logging 5.3.8" 1.39.1. Bug fixes 1.39.2. CVEs 1.40. OpenShift Logging 5.3.7 Expand section "1.40. OpenShift Logging 5.3.7" Collapse section "1.40. OpenShift Logging 5.3.7" 1.40.1. Bug fixes 1.40.2. CVEs 1.41. OpenShift Logging 5.3.6 Expand section "1.41. OpenShift Logging 5.3.6" Collapse section "1.41. OpenShift Logging 5.3.6" 1.41.1. Bug fixes 1.42. OpenShift Logging 5.3.5 Expand section "1.42. OpenShift Logging 5.3.5" Collapse section "1.42. OpenShift Logging 5.3.5" 1.42.1. Bug fixes 1.42.2. CVEs 1.43. OpenShift Logging 5.3.4 Expand section "1.43. OpenShift Logging 5.3.4" Collapse section "1.43. OpenShift Logging 5.3.4" 1.43.1. Bug fixes 1.43.2. CVEs 1.44. OpenShift Logging 5.3.3 Expand section "1.44. OpenShift Logging 5.3.3" Collapse section "1.44. OpenShift Logging 5.3.3" 1.44.1. Bug fixes 1.44.2. CVEs 1.45. OpenShift Logging 5.3.2 Expand section "1.45. OpenShift Logging 5.3.2" Collapse section "1.45. OpenShift Logging 5.3.2" 1.45.1. Bug fixes 1.45.2. CVEs 1.46. OpenShift Logging 5.3.1 Expand section "1.46. OpenShift Logging 5.3.1" Collapse section "1.46. OpenShift Logging 5.3.1" 1.46.1. Bug fixes 1.46.2. CVEs 1.47. OpenShift Logging 5.3.0 Expand section "1.47. OpenShift Logging 5.3.0" Collapse section "1.47. OpenShift Logging 5.3.0" 1.47.1. New features and enhancements 1.47.2. Bug fixes 1.47.3. Known issues 1.47.4. Deprecated and removed features Expand section "1.47.4. Deprecated and removed features" Collapse section "1.47.4. Deprecated and removed features" 1.47.4.1. Forwarding logs using the legacy Fluentd and legacy syslog methods have been removed 1.47.4.2. Configuration mechanisms for legacy forwarding methods have been removed 1.47.5. CVEs 1.48. Logging 5.2.13 Expand section "1.48. Logging 5.2.13" Collapse section "1.48. Logging 5.2.13" 1.48.1. Bug fixes 1.48.2. CVEs 1.49. Logging 5.2.12 Expand section "1.49. Logging 5.2.12" Collapse section "1.49. Logging 5.2.12" 1.49.1. Bug fixes 1.49.2. CVEs 1.50. Logging 5.2.11 Expand section "1.50. Logging 5.2.11" Collapse section "1.50. Logging 5.2.11" 1.50.1. Bug fixes 1.50.2. CVEs 1.51. OpenShift Logging 5.2.10 Expand section "1.51. OpenShift Logging 5.2.10" Collapse section "1.51. OpenShift Logging 5.2.10" 1.51.1. Bug fixes 1.51.2. CVEs 1.52. OpenShift Logging 5.2.9 Expand section "1.52. OpenShift Logging 5.2.9" Collapse section "1.52. OpenShift Logging 5.2.9" 1.52.1. Bug fixes 1.53. OpenShift Logging 5.2.8 Expand section "1.53. OpenShift Logging 5.2.8" Collapse section "1.53. OpenShift Logging 5.2.8" 1.53.1. Bug fixes 1.53.2. CVEs 1.54. OpenShift Logging 5.2.7 Expand section "1.54. OpenShift Logging 5.2.7" Collapse section "1.54. OpenShift Logging 5.2.7" 1.54.1. Bug fixes 1.54.2. CVEs 1.55. OpenShift Logging 5.2.6 Expand section "1.55. OpenShift Logging 5.2.6" Collapse section "1.55. OpenShift Logging 5.2.6" 1.55.1. Bug fixes 1.55.2. CVEs 1.56. OpenShift Logging 5.2.5 Expand section "1.56. OpenShift Logging 5.2.5" Collapse section "1.56. OpenShift Logging 5.2.5" 1.56.1. Bug fixes 1.56.2. CVEs 1.57. OpenShift Logging 5.2.4 Expand section "1.57. OpenShift Logging 5.2.4" Collapse section "1.57. OpenShift Logging 5.2.4" 1.57.1. Bug fixes 1.57.2. CVEs 1.58. OpenShift Logging 5.2.3 Expand section "1.58. OpenShift Logging 5.2.3" Collapse section "1.58. OpenShift Logging 5.2.3" 1.58.1. Bug fixes 1.58.2. CVEs 1.59. OpenShift Logging 5.2.2 Expand section "1.59. OpenShift Logging 5.2.2" Collapse section "1.59. OpenShift Logging 5.2.2" 1.59.1. Bug fixes 1.59.2. CVEs 1.60. OpenShift Logging 5.2.1 Expand section "1.60. OpenShift Logging 5.2.1" Collapse section "1.60. OpenShift Logging 5.2.1" 1.60.1. Bug fixes 1.60.2. CVEs 1.61. OpenShift Logging 5.2.0 Expand section "1.61. OpenShift Logging 5.2.0" Collapse section "1.61. OpenShift Logging 5.2.0" 1.61.1. New features and enhancements 1.61.2. Bug fixes 1.61.3. Known issues 1.61.4. Deprecated and removed features 1.61.5. Forwarding logs using the legacy Fluentd and legacy syslog methods have been deprecated 1.61.6. CVEs 2. Understanding the logging subsystem for Red Hat OpenShift Expand section "2. Understanding the logging subsystem for Red Hat OpenShift" Collapse section "2. Understanding the logging subsystem for Red Hat OpenShift" 2.1. Support considerations for logging 2.2. CloudWatch recommendation for Red Hat OpenShift Service on AWS Expand section "2.2. CloudWatch recommendation for Red Hat OpenShift Service on AWS" Collapse section "2.2. CloudWatch recommendation for Red Hat OpenShift Service on AWS" 2.2.1. Logging requirements 2.3. Glossary of common terms for Red Hat OpenShift Service on AWS Logging 2.4. About deploying the logging subsystem for Red Hat OpenShift Expand section "2.4. About deploying the logging subsystem for Red Hat OpenShift" Collapse section "2.4. About deploying the logging subsystem for Red Hat OpenShift" 2.4.1. About JSON Red Hat OpenShift Service on AWS Logging 2.4.2. About collecting and storing Kubernetes events 2.4.3. About updating Red Hat OpenShift Service on AWS Logging 2.4.4. About viewing the cluster dashboard 2.4.5. About troubleshooting Red Hat OpenShift Service on AWS Logging 2.4.6. About uninstalling Red Hat OpenShift Service on AWS Logging 2.4.7. About exporting fields 2.4.8. About logging subsystem components 2.4.9. About the logging collector 2.4.10. About the log store 2.4.11. About logging visualization 2.4.12. About event routing 2.4.13. About log forwarding 2.5. About Vector Expand section "2.5. About Vector" Collapse section "2.5. About Vector" 2.5.1. Enabling Vector 2.5.2. Collector features 3. Installing the logging subsystem for Red Hat OpenShift Expand section "3. Installing the logging subsystem for Red Hat OpenShift" Collapse section "3. Installing the logging subsystem for Red Hat OpenShift" 3.1. Installing the logging subsystem for Red Hat OpenShift using the web console 3.2. Post-installation tasks 3.3. Installing the logging subsystem for Red Hat OpenShift using the CLI 3.4. Post-installation tasks Expand section "3.4. Post-installation tasks" Collapse section "3.4. Post-installation tasks" 3.4.1. Defining Kibana index patterns 3.4.2. Allowing traffic between projects when network isolation is enabled 4. Accessing the service logs for Red Hat OpenShift Service on AWS clusters Expand section "4. Accessing the service logs for Red Hat OpenShift Service on AWS clusters" Collapse section "4. Accessing the service logs for Red Hat OpenShift Service on AWS clusters" 4.1. Viewing the service logs by using OpenShift Cluster Manager 4.2. Adding cluster notification contacts 5. Viewing cluster logs in the AWS Console Expand section "5. Viewing cluster logs in the AWS Console" Collapse section "5. Viewing cluster logs in the AWS Console" 5.1. Viewing forwarded logs 6. Configuring your Logging deployment Expand section "6. Configuring your Logging deployment" Collapse section "6. Configuring your Logging deployment" 6.1. About the Cluster Logging custom resource Expand section "6.1. About the Cluster Logging custom resource" Collapse section "6.1. About the Cluster Logging custom resource" 6.1.1. About the ClusterLogging custom resource 6.2. Configuring the logging collector Expand section "6.2. Configuring the logging collector" Collapse section "6.2. Configuring the logging collector" 6.2.1. About unsupported configurations 6.2.2. Viewing logging collector pods 6.2.3. Configure log collector CPU and memory limits 6.2.4. Advanced configuration for the log forwarder 6.2.5. Removing unused components if you do not use the default Elasticsearch log store 6.3. Configuring the log store Expand section "6.3. Configuring the log store" Collapse section "6.3. Configuring the log store" 6.3.1. Forwarding audit logs to the log store 6.3.2. Configuring log retention time 6.3.3. Configuring CPU and memory requests for the log store 6.3.4. Configuring replication policy for the log store 6.3.5. Scaling down Elasticsearch pods 6.3.6. Configuring persistent storage for the log store 6.3.7. Configuring the log store for emptyDir storage 6.3.8. Performing an Elasticsearch rolling cluster restart 6.3.9. Exposing the log store service as a route 6.4. Configuring the log visualizer Expand section "6.4. Configuring the log visualizer" Collapse section "6.4. Configuring the log visualizer" 6.4.1. Configuring CPU and memory limits 6.4.2. Scaling redundancy for the log visualizer nodes 6.5. Configuring logging subsystem storage Expand section "6.5. Configuring logging subsystem storage" Collapse section "6.5. Configuring logging subsystem storage" 6.5.1. Storage considerations for the logging subsystem for Red Hat OpenShift 6.5.2. Additional resources 6.6. Configuring CPU and memory limits for logging subsystem components Expand section "6.6. Configuring CPU and memory limits for logging subsystem components" Collapse section "6.6. Configuring CPU and memory limits for logging subsystem components" 6.6.1. Configuring CPU and memory limits 6.7. Using tolerations to control OpenShift Logging pod placement Expand section "6.7. Using tolerations to control OpenShift Logging pod placement" Collapse section "6.7. Using tolerations to control OpenShift Logging pod placement" 6.7.1. Using tolerations to control the log store pod placement 6.7.2. Using tolerations to control the log visualizer pod placement 6.7.3. Using tolerations to control the log collector pod placement 6.7.4. Additional resources 6.8. Moving logging subsystem resources with node selectors Expand section "6.8. Moving logging subsystem resources with node selectors" Collapse section "6.8. Moving logging subsystem resources with node selectors" 6.8.1. Moving OpenShift Logging resources 6.9. Maintenance and support Expand section "6.9. Maintenance and support" Collapse section "6.9. Maintenance and support" 6.9.1. About unsupported configurations 6.9.2. Unsupported configurations 6.9.3. Support policy for unmanaged Operators 7. Loki Expand section "7. Loki" Collapse section "7. Loki" 7.1. About the LokiStack Expand section "7.1. About the LokiStack" Collapse section "7.1. About the LokiStack" 7.1.1. Deployment Sizing 7.1.2. Supported API Custom Resource Definitions 7.2. Deploying the LokiStack 7.3. Enabling stream-based retention with Loki 7.4. Forwarding logs to LokiStack Expand section "7.4. Forwarding logs to LokiStack" Collapse section "7.4. Forwarding logs to LokiStack" 7.4.1. Troubleshooting Loki "entry out of order" errors 7.5. Additional Resources 8. Viewing logs for a resource Expand section "8. Viewing logs for a resource" Collapse section "8. Viewing logs for a resource" 8.1. Viewing resource logs 9. Viewing cluster logs by using Kibana Expand section "9. Viewing cluster logs by using Kibana" Collapse section "9. Viewing cluster logs by using Kibana" 9.1. Defining Kibana index patterns 9.2. Viewing cluster logs in Kibana 10. Forwarding logs to external third-party logging systems Expand section "10. Forwarding logs to external third-party logging systems" Collapse section "10. Forwarding logs to external third-party logging systems" 10.1. About forwarding logs to third-party systems Expand section "10.1. About forwarding logs to third-party systems" Collapse section "10.1. About forwarding logs to third-party systems" 10.1.1. Creating a Secret 10.2. Forwarding JSON logs from containers in the same pod to separate indices 10.3. Supported log data output types in OpenShift Logging 5.1 10.4. Supported log data output types in OpenShift Logging 5.2 10.5. Supported log data output types in OpenShift Logging 5.3 10.6. Supported log data output types in OpenShift Logging 5.4 10.7. Supported log data output types in OpenShift Logging 5.5 10.8. Supported log data output types in OpenShift Logging 5.6 10.9. Forwarding logs to an external Elasticsearch instance 10.10. Forwarding logs using the Fluentd forward protocol Expand section "10.10. Forwarding logs using the Fluentd forward protocol" Collapse section "10.10. Forwarding logs using the Fluentd forward protocol" 10.10.1. Enabling nanosecond precision for Logstash to ingest data from fluentd 10.11. Forwarding logs using the syslog protocol Expand section "10.11. Forwarding logs using the syslog protocol" Collapse section "10.11. Forwarding logs using the syslog protocol" 10.11.1. Adding log source information to message output 10.11.2. Syslog parameters 10.11.3. Additional RFC5424 syslog parameters 10.12. Forwarding logs to Amazon CloudWatch Expand section "10.12. Forwarding logs to Amazon CloudWatch" Collapse section "10.12. Forwarding logs to Amazon CloudWatch" 10.12.1. Forwarding logs to Amazon CloudWatch from STS enabled clusters 10.12.2. Creating a secret for AWS CloudWatch with an existing AWS role 10.13. Forwarding logs to Loki Expand section "10.13. Forwarding logs to Loki" Collapse section "10.13. Forwarding logs to Loki" 10.13.1. Troubleshooting Loki "entry out of order" errors 10.14. Forwarding logs to Splunk 10.15. Forwarding logs over HTTP 10.16. Forwarding application logs from specific projects 10.17. Forwarding application logs from specific pods 10.18. Troubleshooting log forwarding 11. Enabling JSON logging Expand section "11. Enabling JSON logging" Collapse section "11. Enabling JSON logging" 11.1. Parsing JSON logs 11.2. Configuring JSON log data for Elasticsearch 11.3. Forwarding JSON logs to the Elasticsearch log store 12. Collecting and storing Kubernetes events Expand section "12. Collecting and storing Kubernetes events" Collapse section "12. Collecting and storing Kubernetes events" 12.1. Deploying and configuring the Event Router 13. Updating OpenShift Logging Expand section "13. Updating OpenShift Logging" Collapse section "13. Updating OpenShift Logging" 13.1. Supported Versions 13.2. Updating Logging to the current version 14. Viewing cluster dashboards Expand section "14. Viewing cluster dashboards" Collapse section "14. Viewing cluster dashboards" 14.1. Accessing the Elasticsearch and OpenShift Logging dashboards 14.2. About the OpenShift Logging dashboard 14.3. Charts on the Logging/Elasticsearch nodes dashboard 15. Troubleshooting Logging Expand section "15. Troubleshooting Logging" Collapse section "15. Troubleshooting Logging" 15.1. Viewing OpenShift Logging status Expand section "15.1. Viewing OpenShift Logging status" Collapse section "15.1. Viewing OpenShift Logging status" 15.1.1. Viewing the status of the Red Hat OpenShift Logging Operator Expand section "15.1.1. Viewing the status of the Red Hat OpenShift Logging Operator" Collapse section "15.1.1. Viewing the status of the Red Hat OpenShift Logging Operator" 15.1.1.1. Example condition messages 15.1.2. Viewing the status of logging subsystem components 15.2. Viewing the status of the Elasticsearch log store Expand section "15.2. Viewing the status of the Elasticsearch log store" Collapse section "15.2. Viewing the status of the Elasticsearch log store" 15.2.1. Viewing the status of the log store Expand section "15.2.1. Viewing the status of the log store" Collapse section "15.2.1. Viewing the status of the log store" 15.2.1.1. Example condition messages 15.2.2. Viewing the status of the log store components 15.2.3. Elasticsearch cluster status 15.3. Understanding logging subsystem alerts Expand section "15.3. Understanding logging subsystem alerts" Collapse section "15.3. Understanding logging subsystem alerts" 15.3.1. Viewing logging collector alerts 15.3.2. About logging collector alerts 15.3.3. About Elasticsearch alerting rules 15.4. Collecting logging data for Red Hat Support Expand section "15.4. Collecting logging data for Red Hat Support" Collapse section "15.4. Collecting logging data for Red Hat Support" 15.4.1. About the must-gather tool 15.4.2. Prerequisites 15.4.3. Collecting OpenShift Logging data 15.5. Troubleshooting for Critical Alerts Expand section "15.5. Troubleshooting for Critical Alerts" Collapse section "15.5. Troubleshooting for Critical Alerts" 15.5.1. Elasticsearch Cluster Health is Red 15.5.2. Elasticsearch Cluster Health is Yellow 15.5.3. Elasticsearch Node Disk Low Watermark Reached 15.5.4. Elasticsearch Node Disk High Watermark Reached 15.5.5. Elasticsearch Node Disk Flood Watermark Reached 15.5.6. Elasticsearch JVM Heap Use is High 15.5.7. Aggregated Logging System CPU is High 15.5.8. Elasticsearch Process CPU is High 15.5.9. Elasticsearch Disk Space is Running Low 15.5.10. Elasticsearch FileDescriptor Usage is high 16. Uninstalling OpenShift Logging Expand section "16. Uninstalling OpenShift Logging" Collapse section "16. Uninstalling OpenShift Logging" 16.1. Uninstalling the logging subsystem for Red Hat OpenShift 17. Log Record Fields 18. message 19. structured 20. @timestamp 21. hostname 22. ipaddr4 23. ipaddr6 24. level 25. pid 26. service 27. tags 28. file 29. offset 30. kubernetes Expand section "30. kubernetes" Collapse section "30. kubernetes" 30.1. kubernetes.pod_name 30.2. kubernetes.pod_id 30.3. kubernetes.namespace_name 30.4. kubernetes.namespace_id 30.5. kubernetes.host 30.6. kubernetes.container_name 30.7. kubernetes.annotations 30.8. kubernetes.labels 30.9. kubernetes.event Expand section "30.9. kubernetes.event" Collapse section "30.9. kubernetes.event" 30.9.1. kubernetes.event.verb 30.9.2. kubernetes.event.metadata Expand section "30.9.2. kubernetes.event.metadata" Collapse section "30.9.2. kubernetes.event.metadata" 30.9.2.1. kubernetes.event.metadata.name 30.9.2.2. kubernetes.event.metadata.namespace 30.9.2.3. kubernetes.event.metadata.selfLink 30.9.2.4. kubernetes.event.metadata.uid 30.9.2.5. kubernetes.event.metadata.resourceVersion 30.9.3. kubernetes.event.involvedObject Expand section "30.9.3. kubernetes.event.involvedObject" Collapse section "30.9.3. kubernetes.event.involvedObject" 30.9.3.1. kubernetes.event.involvedObject.kind 30.9.3.2. kubernetes.event.involvedObject.namespace 30.9.3.3. kubernetes.event.involvedObject.name 30.9.3.4. kubernetes.event.involvedObject.uid 30.9.3.5. kubernetes.event.involvedObject.apiVersion 30.9.3.6. kubernetes.event.involvedObject.resourceVersion 30.9.4. kubernetes.event.reason 30.9.5. kubernetes.event.source_component 30.9.6. kubernetes.event.firstTimestamp 30.9.7. kubernetes.event.count 30.9.8. kubernetes.event.type 31. OpenShift Expand section "31. OpenShift" Collapse section "31. OpenShift" 31.1. openshift.labels Legal Notice Settings Close Language: 简体中文 日本語 한국어 English Language: 简体中文 日本語 한국어 English Format: Multi-page Single-page PDF Format: Multi-page Single-page PDF Language and Page Formatting Options Language: 简体中文 日本語 한국어 English Language: 简体中文 日本語 한국어 English Format: Multi-page Single-page PDF Format: Multi-page Single-page PDF Chapter 31. OpenShift The namespace for openshift-logging specific metadata Data type group 31.1. openshift.labels Labels added by the Cluster Log Forwarder configuration Data type group Previous Next