Is it possible to edit fluentd.conf to create a custom format for application logs in OpenShift?

Solution Verified - Updated -

Issue

  • Openshift-logging collects application logs and forwards them to a security information and event management (SIEM) application that expects a custom header format.
  • Can the fluentd.conf be edited in the ConfigMap to add record_transformer lines that insert the desired headers into the forwarded logs?
  • Will fluentd.conf edits persist or will the operator/audit function replace the edits with the factory defaults?
  • Does openshift allow to edit fluentd.conf to add extra information?

Environment

  • Red Hat OpenShift Container Platform (RHOCP)
    • 4

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content