How to send logs to an External Syslog Server in EFK?

Solution Verified - Updated -

Issue

  • How to send logs to an External Syslog Server in EFK?
  • Sending Logs to an External Syslog Server in openshift not working.
  • In ds/logging-fluentd did the below changes:
- name: USE_REMOTE_SYSLOG
  value: "true"
- name: REMOTE_SYSLOG_HOST
  value: 192.168.0.1
  • In logs of the fluentd container below messages are showing:
[DEPRECATION WARNING]: 'merge_json_log' for the fluent-plugin-kubernetes_metadata_filter will no longer be supported in future releases
2018-10-22 14:30:45 +0200 [info]: reading config file path="/etc/fluent/fluent.conf"
2018-10-22 14:30:47 +0200 [warn]: 'block' action stops input process until the buffer full is resolved. Check your pipeline this action is fit or not
2018-10-22 14:30:57 +0200 [warn]: out:syslog: failed to open tcp socket  192.168.0.1:514 :execution expired
2018-10-22 14:31:59 +0200 [warn]: temporarily failed to flush the buffer. next_retry=2018-10-22 14:30:58 +0200 error_class="Fluent::ElasticsearchErrorHandler::ElasticsearchError" error="Elasticsearch returned errors, retrying. Add '@log_level debug' to your config to see the full response" plugin_id="object:3f91d8fbe1f0"
  • Logs not able to flow to the external syslog server

Environment

  • OpenShift Container Platform 3.9

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.