Show differences in logging config between v2.5.0 and v2.5.8 for #3244

This commit is contained in:
Catherine Luse
2021-05-19 15:37:24 -07:00
parent 48c2752fc2
commit 4e0bd8c926
3 changed files with 173 additions and 11 deletions
@@ -5,13 +5,24 @@ weight: 1
For the full details on configuring Flows and ClusterFlows, see the [Banzai Cloud Logging operator documentation.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/output/)
- [Configuration](#configuration)
- [YAML Example](#yaml-example)
# Configuration
{{% tabs %}}
{{% tab "Rancher v2.5.8+" %}}
- [Flows](#flows-2-5-8)
- [Matches](#matches-2-5-8)
- [Filters](#filters-2-5-8)
- [Outputs](#outputs-2-5-8)
- [ClusterFlows](#clusterflows-2-5-8)
- [YAML Example](#yaml-example)
# Changes in v2.5.8
The Flows and ClusterFlows can now be configured by filling out forms in the Rancher UI.
<a id="flows-2-5-8"></a>
@@ -21,6 +32,8 @@ A Flow defines which logs to collect and filter and which output to send the log
The Flow is a namespaced resource, which means logs will only be collected from the namespace that the flow is deployed in.
For more details about the Flow custom resource, see [FlowSpec.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/crds/v1beta1/flow_types/)
<a id="matches-2-5-8"></a>
@@ -32,6 +45,8 @@ You can specify match statements to select or exclude logs according to Kubernet
Match statements are evaluated in the order they are defined and processed only until the first matching select or exclude rule applies.
Matches can be configured by filling out the Flow or ClusterFlow forms in the Rancher UI.
For detailed examples on using the match statement, see the [official documentation on log routing.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/log-routing/)
<a id="filters-2-5-8"></a>
@@ -42,6 +57,8 @@ You can define one or more filters within a Flow. Filters can perform various ac
For a list of filters supported by the Banzai Cloud Logging operator, see [this page.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/plugins/filters/)
Filters need to be configured in YAML.
<a id="outputs-2-5-8"></a>
### Outputs
@@ -50,14 +67,81 @@ This Output will receive logs from the Flow.
Because the Flow is a namespaced resource, the Output must reside in same namespace as the Flow.
Outputs can be referenced when filling out the Flow or ClusterFlow forms in the Rancher UI.
<a id="clusterflows-2-5-8"></a>
# ClusterFlows
Matches, filters and outputs are configured for ClusterFlows in the same way that they are configured for Flows. The key difference is that the ClusterFlow is scoped at the cluster level and can configure log collection across all namespaces.
After ClusterFlow selects logs from all namespaces in the cluster, logs from the cluster will be collected and logged to the selected ClusterOutput.
{{% /tab %}}
{{% tab "Rancher before v2.5.8" %}}
- [Flows](#flows-2-5-0)
- [Matches](#matches-2-5-0)
- [Filters](#filters-2-5-0)
- [Outputs](#outputs-2-5-0)
- [ClusterFlows](#clusterflows-2-5-0)
<a id="flows-2-5-0"></a>
# Flows
A Flow defines which logs to collect and filter and which output to send the logs to.
The Flow is a namespaced resource, which means logs will only be collected from the namespace that the flow is deployed in.
Flows need to be defined in YAML.
For more details about the Flow custom resource, see [FlowSpec.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/crds/v1beta1/flow_types/)
<a id="matches-2-5-0"></a>
### Matches
Match statements are used to select which containers to pull logs from.
You can specify match statements to select or exclude logs according to Kubernetes labels, container and host names.
Match statements are evaluated in the order they are defined and processed only until the first matching select or exclude rule applies.
For detailed examples on using the match statement, see the [official documentation on log routing.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/log-routing/)
<a id="filters-2-5-0"></a>
### Filters
You can define one or more filters within a Flow. Filters can perform various actions on the logs, for example, add additional data, transform the logs, or parse values from the records. The filters in the flow are applied in the order in the definition.
For a list of filters supported by the Banzai Cloud Logging operator, see [this page.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/plugins/filters/)
<a id="outputs-2-5-0"></a>
### Outputs
This Output will receive logs from the Flow.
Because the Flow is a namespaced resource, the Output must reside in same namespace as the Flow.
<a id="clusterflows-2-5-0"></a>
# ClusterFlows
Matches, filters and outputs are also configured for ClusterFlows. The only difference is that the ClusterFlow is scoped at the cluster level and can configure log collection across all namespaces.
ClusterFlow selects logs from all namespaces in the cluster. Logs from the cluster will be collected and logged to the selected ClusterOutput.
ClusterFlows need to be defined in YAML.
{{% /tab %}}
{{% /tabs %}}
# YAML Example
The following example Flow transforms the log messages from the default namespace and sends them to an S3 output:
@@ -5,14 +5,29 @@ weight: 2
For the full details on configuring Outputs and ClusterOutputs, see the [Banzai Cloud Logging operator documentation.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/output/)
- [Outputs](#outputs)
- [ClusterOutputs](#clusteroutputs)
- [Configuration](#configuration)
- [YAML Examples](#yaml-examples)
- [Cluster Output to ElasticSearch](#cluster-output-to-elasticsearch)
- [Output to Splunk](#output-to-splunk)
- [Output to Syslog](#output-to-syslog)
- [Unsupported Outputs](#unsupported-outputs)
# Configuration
{{% tabs %}}
{{% tab "v2.5.8+" %}}
- [Outputs](#outputs-2-5-8)
- [ClusterOutputs](#clusteroutputs-2-5-8)
# Changes in v2.5.8
The Outputs and ClusterOutputs can now be configured by filling out forms in the Rancher UI.
<a id="outputs-2-5-8"></a>
# Outputs
The Output resource defines an output where your Flows can send the log messages. Outputs are the final stage for a logging flow.
@@ -21,22 +36,86 @@ The output is a namespaced resource, which means only a Flow within the same nam
You can use secrets in these definitions, but they must also be in the same namespace.
For the details of the supported output plugins, see [Outputs.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/plugins/outputs/)
For the details of Output custom resource, see [OutputSpec.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/crds/v1beta1/output_types/)
The Rancher UI provides forms for configuring the following Output types:
- Amazon ElasticSearch
- Azure Storage
- Cloudwatch
- Datadog
- Elasticsearch
- File
- Fluentd
- GCS
- Kafka
- Kinesis Stream
- LogDNA
- LogZ
- Loki
- New Relic
- Splunk
- SumoLogic
- Syslog
The Rancher UI provides forms for configuring the Output type, target, and access credentials if applicable.
For example configuration for each logging plugin supported by the logging operator, see the [logging operator documentation.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/plugins/outputs/)
<a id="clusteroutputs-2-5-8"></a>
# ClusterOutputs
ClusterOutput defines an Output without namespace restrictions.
ClusterOutput defines an Output without namespace restrictions. It is only effective when deployed in the same namespace as the logging operator.
It is only evaluated in the controlNamespace by default unless allowClusterResourcesFromAllNamespaces is set to true.
For the details of the ClusterOutput custom resource, see [ClusterOutput.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/crds/v1beta1/clusteroutput_types/)
{{% /tab %}}
{{% tab "v2.5.0-v2.5.7" %}}
- [Outputs](#outputs-2-5-0)
- [ClusterOutputs](#clusteroutputs-2-5-0)
<a id="outputs-2-5-0"></a>
# Outputs
The Output resource defines an output where your Flows can send the log messages. Outputs are the final stage for a logging flow.
The output is a namespaced resource, which means only a Flow within the same namespace can access it.
You can use secrets in these definitions, but they must also be in the same namespace.
Outputs are configured in YAML. For the details of Output custom resource, see [OutputSpec.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/crds/v1beta1/output_types/)
For examples of configuration for each logging plugin supported by the logging operator, see the [logging operator documentation.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/plugins/outputs/)
<a id="clusteroutputs-2-5-0"></a>
# ClusterOutputs
ClusterOutput defines an Output without namespace restrictions. It is only effective when deployed in the same namespace as the logging operator.
The Rancher UI provides forms for configuring the ClusterOutput type, target, and access credentials if applicable.
ClusterOutputs are configured in YAML. For the details of ClusterOutput custom resource, see [ClusterOutput.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/crds/v1beta1/clusteroutput_types/)
For example configuration for each logging plugin supported by the logging operator, see the [logging operator documentation.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/plugins/outputs/)
{{% /tab %}}
{{% /tabs %}}
For the details of ClusterOutput custom resource, see [ClusterOutput.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/crds/v1beta1/clusteroutput_types/)
# YAML Examples
Once logging is installed, you can use these examples to help craft your own logging pipeline.
- [Cluster Output to ElasticSearch](#cluster-output-to-elasticsearch)
- [Output to Splunk](#output-to-splunk)
- [Output to Syslog](#output-to-syslog)
- [Unsupported Outputs](#unsupported-outputs)
### Cluster Output to ElasticSearch
Let's say you wanted to send all logs in your cluster to an `elasticsearch` cluster. First, we create a cluster output.
@@ -72,7 +151,6 @@ spec:
We should now see our configured index with logs in it.
### Output to Splunk
What if we have an application team who only wants logs from a specific namespaces sent to a `splunk` server? For this case, we can use namespaced outputs and flows.
@@ -1,6 +1,6 @@
---
title: Role-based Access Control
shortTitle: Role-based Access Control for Logging
shortTitle: Role-based Access Control
title: Role-based Access Control for Logging
weight: 3
---