Create a forwarder pod in openshift-logging
namespace, to forward log between OpenShift Cluster Fluentd (log collector) and an external log storage (currently splunk).
A single pod is used to produce a single point for log input and output.
- 1-ClusterLogging.yml: Put the ressources limit and request
- 2a-ConfigMap-SplunkURL: Put splunk URL and Port
- 2b-Secret-SplunkTOKEN: Put splunk access token
Look in subdirectories README for additionnal files to configure.
Audit log disable by default. Look in configMap-pipeline
to change filter.
- Cluster Logging Operator installed.
- No Cluster Logging or Cluster Log Forwarder instance running.
- Image listed in others README available to the cluster.
- Use
oc apply -f <file>
with every.yml
files in order, or useinstall.sh
- Delete every resources created by
.yml
files (listed inResourceList
files), or useuninstall.sh