Is it possible to edit fluentd.conf to create a custom format for application logs in OpenShift?
Issue
- Openshift-logging collects application logs and forwards them to a security information and event management (SIEM) application that expects a custom header format.
- Can the
fluentd.conf
be edited in theConfigMap
to addrecord_transformer
lines that insert the desired headers into the forwarded logs? - Will
fluentd.conf
edits persist or will the operator/audit function replace the edits with the factory defaults? - Does openshift allow to edit
fluentd.conf
to add extra information?
Environment
- Red Hat OpenShift Container Platform (RHOCP)
- 4
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.