From 4e0bd8c926979c0ba002f4e94993af59a53bb8e4 Mon Sep 17 00:00:00 2001 From: Catherine Luse Date: Wed, 19 May 2021 15:37:14 -0700 Subject: [PATCH] Show differences in logging config between v2.5.0 and v2.5.8 for #3244 --- .../custom-resource-config/flows/_index.md | 86 ++++++++++++++++- .../custom-resource-config/outputs/_index.md | 94 +++++++++++++++++-- .../rancher/v2.5/en/logging/rbac/_index.md | 4 +- 3 files changed, 173 insertions(+), 11 deletions(-) diff --git a/content/rancher/v2.5/en/logging/custom-resource-config/flows/_index.md b/content/rancher/v2.5/en/logging/custom-resource-config/flows/_index.md index 03d3c8c69ee..c78fa73db93 100644 --- a/content/rancher/v2.5/en/logging/custom-resource-config/flows/_index.md +++ b/content/rancher/v2.5/en/logging/custom-resource-config/flows/_index.md @@ -5,13 +5,24 @@ weight: 1 For the full details on configuring Flows and ClusterFlows, see the [Banzai Cloud Logging operator documentation.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/output/) +- [Configuration](#configuration) +- [YAML Example](#yaml-example) + +# Configuration + +{{% tabs %}} +{{% tab "Rancher v2.5.8+" %}} - [Flows](#flows-2-5-8) - [Matches](#matches-2-5-8) - [Filters](#filters-2-5-8) - [Outputs](#outputs-2-5-8) - [ClusterFlows](#clusterflows-2-5-8) -- [YAML Example](#yaml-example) + +# Changes in v2.5.8 + +The Flows and ClusterFlows can now be configured by filling out forms in the Rancher UI. + @@ -21,6 +32,8 @@ A Flow defines which logs to collect and filter and which output to send the log The Flow is a namespaced resource, which means logs will only be collected from the namespace that the flow is deployed in. +For more details about the Flow custom resource, see [FlowSpec.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/crds/v1beta1/flow_types/) + @@ -32,6 +45,8 @@ You can specify match statements to select or exclude logs according to Kubernet Match statements are evaluated in the order they are defined and processed only until the first matching select or exclude rule applies. +Matches can be configured by filling out the Flow or ClusterFlow forms in the Rancher UI. + For detailed examples on using the match statement, see the [official documentation on log routing.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/log-routing/) @@ -42,6 +57,8 @@ You can define one or more filters within a Flow. Filters can perform various ac For a list of filters supported by the Banzai Cloud Logging operator, see [this page.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/plugins/filters/) +Filters need to be configured in YAML. + ### Outputs @@ -50,14 +67,81 @@ This Output will receive logs from the Flow. Because the Flow is a namespaced resource, the Output must reside in same namespace as the Flow. +Outputs can be referenced when filling out the Flow or ClusterFlow forms in the Rancher UI. + # ClusterFlows +Matches, filters and outputs are configured for ClusterFlows in the same way that they are configured for Flows. The key difference is that the ClusterFlow is scoped at the cluster level and can configure log collection across all namespaces. + +After ClusterFlow selects logs from all namespaces in the cluster, logs from the cluster will be collected and logged to the selected ClusterOutput. + +{{% /tab %}} +{{% tab "Rancher before v2.5.8" %}} + +- [Flows](#flows-2-5-0) + - [Matches](#matches-2-5-0) + - [Filters](#filters-2-5-0) + - [Outputs](#outputs-2-5-0) +- [ClusterFlows](#clusterflows-2-5-0) + + + + +# Flows + +A Flow defines which logs to collect and filter and which output to send the logs to. + +The Flow is a namespaced resource, which means logs will only be collected from the namespace that the flow is deployed in. + +Flows need to be defined in YAML. + +For more details about the Flow custom resource, see [FlowSpec.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/crds/v1beta1/flow_types/) + + + + +### Matches + +Match statements are used to select which containers to pull logs from. + +You can specify match statements to select or exclude logs according to Kubernetes labels, container and host names. + +Match statements are evaluated in the order they are defined and processed only until the first matching select or exclude rule applies. + +For detailed examples on using the match statement, see the [official documentation on log routing.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/log-routing/) + + + +### Filters + +You can define one or more filters within a Flow. Filters can perform various actions on the logs, for example, add additional data, transform the logs, or parse values from the records. The filters in the flow are applied in the order in the definition. + +For a list of filters supported by the Banzai Cloud Logging operator, see [this page.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/plugins/filters/) + + + +### Outputs + +This Output will receive logs from the Flow. + +Because the Flow is a namespaced resource, the Output must reside in same namespace as the Flow. + + + +# ClusterFlows + Matches, filters and outputs are also configured for ClusterFlows. The only difference is that the ClusterFlow is scoped at the cluster level and can configure log collection across all namespaces. ClusterFlow selects logs from all namespaces in the cluster. Logs from the cluster will be collected and logged to the selected ClusterOutput. +ClusterFlows need to be defined in YAML. + +{{% /tab %}} +{{% /tabs %}} + + # YAML Example The following example Flow transforms the log messages from the default namespace and sends them to an S3 output: diff --git a/content/rancher/v2.5/en/logging/custom-resource-config/outputs/_index.md b/content/rancher/v2.5/en/logging/custom-resource-config/outputs/_index.md index cb8cff8a11b..58f5cc7f024 100644 --- a/content/rancher/v2.5/en/logging/custom-resource-config/outputs/_index.md +++ b/content/rancher/v2.5/en/logging/custom-resource-config/outputs/_index.md @@ -5,14 +5,29 @@ weight: 2 For the full details on configuring Outputs and ClusterOutputs, see the [Banzai Cloud Logging operator documentation.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/output/) -- [Outputs](#outputs) -- [ClusterOutputs](#clusteroutputs) +- [Configuration](#configuration) - [YAML Examples](#yaml-examples) - [Cluster Output to ElasticSearch](#cluster-output-to-elasticsearch) - [Output to Splunk](#output-to-splunk) - [Output to Syslog](#output-to-syslog) - [Unsupported Outputs](#unsupported-outputs) +# Configuration + +{{% tabs %}} +{{% tab "v2.5.8+" %}} + + + +- [Outputs](#outputs-2-5-8) +- [ClusterOutputs](#clusteroutputs-2-5-8) + +# Changes in v2.5.8 + +The Outputs and ClusterOutputs can now be configured by filling out forms in the Rancher UI. + + + # Outputs The Output resource defines an output where your Flows can send the log messages. Outputs are the final stage for a logging flow. @@ -21,22 +36,86 @@ The output is a namespaced resource, which means only a Flow within the same nam You can use secrets in these definitions, but they must also be in the same namespace. -For the details of the supported output plugins, see [Outputs.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/plugins/outputs/) - For the details of Output custom resource, see [OutputSpec.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/crds/v1beta1/output_types/) +The Rancher UI provides forms for configuring the following Output types: + +- Amazon ElasticSearch +- Azure Storage +- Cloudwatch +- Datadog +- Elasticsearch +- File +- Fluentd +- GCS +- Kafka +- Kinesis Stream +- LogDNA +- LogZ +- Loki +- New Relic +- Splunk +- SumoLogic +- Syslog + +The Rancher UI provides forms for configuring the Output type, target, and access credentials if applicable. + +For example configuration for each logging plugin supported by the logging operator, see the [logging operator documentation.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/plugins/outputs/) + + + # ClusterOutputs -ClusterOutput defines an Output without namespace restrictions. +ClusterOutput defines an Output without namespace restrictions. It is only effective when deployed in the same namespace as the logging operator. -It is only evaluated in the controlNamespace by default unless allowClusterResourcesFromAllNamespaces is set to true. +For the details of the ClusterOutput custom resource, see [ClusterOutput.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/crds/v1beta1/clusteroutput_types/) + +{{% /tab %}} +{{% tab "v2.5.0-v2.5.7" %}} + + +- [Outputs](#outputs-2-5-0) +- [ClusterOutputs](#clusteroutputs-2-5-0) + + + +# Outputs + +The Output resource defines an output where your Flows can send the log messages. Outputs are the final stage for a logging flow. + +The output is a namespaced resource, which means only a Flow within the same namespace can access it. + +You can use secrets in these definitions, but they must also be in the same namespace. + +Outputs are configured in YAML. For the details of Output custom resource, see [OutputSpec.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/crds/v1beta1/output_types/) + +For examples of configuration for each logging plugin supported by the logging operator, see the [logging operator documentation.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/plugins/outputs/) + + + +# ClusterOutputs + +ClusterOutput defines an Output without namespace restrictions. It is only effective when deployed in the same namespace as the logging operator. + +The Rancher UI provides forms for configuring the ClusterOutput type, target, and access credentials if applicable. + +ClusterOutputs are configured in YAML. For the details of ClusterOutput custom resource, see [ClusterOutput.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/crds/v1beta1/clusteroutput_types/) + +For example configuration for each logging plugin supported by the logging operator, see the [logging operator documentation.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/plugins/outputs/) + +{{% /tab %}} +{{% /tabs %}} -For the details of ClusterOutput custom resource, see [ClusterOutput.](https://banzaicloud.com/docs/one-eye/logging-operator/configuration/crds/v1beta1/clusteroutput_types/) # YAML Examples Once logging is installed, you can use these examples to help craft your own logging pipeline. +- [Cluster Output to ElasticSearch](#cluster-output-to-elasticsearch) +- [Output to Splunk](#output-to-splunk) +- [Output to Syslog](#output-to-syslog) +- [Unsupported Outputs](#unsupported-outputs) + ### Cluster Output to ElasticSearch Let's say you wanted to send all logs in your cluster to an `elasticsearch` cluster. First, we create a cluster output. @@ -72,7 +151,6 @@ spec: We should now see our configured index with logs in it. - ### Output to Splunk What if we have an application team who only wants logs from a specific namespaces sent to a `splunk` server? For this case, we can use namespaced outputs and flows. diff --git a/content/rancher/v2.5/en/logging/rbac/_index.md b/content/rancher/v2.5/en/logging/rbac/_index.md index 969af991b06..6db6fa6135c 100644 --- a/content/rancher/v2.5/en/logging/rbac/_index.md +++ b/content/rancher/v2.5/en/logging/rbac/_index.md @@ -1,6 +1,6 @@ --- -title: Role-based Access Control -shortTitle: Role-based Access Control for Logging +shortTitle: Role-based Access Control +title: Role-based Access Control for Logging weight: 3 ---