Filtering logs while forwarding in OpenShift 4

Solution Verified - Updated -

Environment

  • Red Hat OpenShift Container Platform (RHOCP)
    • 4
  • Red Hat Openshift Logging (RHOL)
    • 5
  • Log Forwarding

Issue

  • Add the multiple Syslog facility and severity for audit logs.
  • How to filter forwarded logs in OpenShift 4.

Resolution

Filtering logs selecting log streams by origin (pod name, namespace, labels) is supported. More details in "Forwarding application logs from specific projects" and "Forwarding application logs from specific pods"

Configuring broad audit log policy is described in this related solution.
Filter and control size of audit logs has beed added by OBSDA-339: Filter and control size of audit logs to RHOL 5.8, supported in OCP versions from 4.12.

Advanced filtering has been added by OBSDA-228: Log filtering and collecting to RHOL 5.9, supported in OCP versions from 4.13. Refer to the RHOL 5.9 documentation for additional information:

Root Cause

Filter and control size of audit logs is supported starting with RHOL 5.8.

Advanced log filtering in OpenShift Logging is supported starting with RHOL 5.9.

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

Comments