Is it possible to edit fluent.conf to create a custom format for application logs in OpenShift 4?
Issue
- Openshift Logging collects application logs and forwards them to a security information and event management (SIEM) application that expects a custom header format.
- Can the
fluent.conf
be edited in theConfigMap
to addrecord_transformer
lines that insert the desired headers into the forwarded logs? - Will
fluent.conf
edits persist or will the operator/audit function replace the edits with the factory defaults? - Does Openshift Logging operator allow to edit
fluent.conf
to add extra information?
Environment
- Red Hat OpenShift Container Platform (RHOCP)
- 4
- Red Hat OpenShift Logging (RHOL)
- 5
- Fluentd
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.