Parsing cri-o log format, add Kubernetes context to container logs
Input Filter: Kubernetes cri-o / containerd¶
Parsing cri-o containerd log format. Use the file input plugin to read log files. See the IBM Cloud Kuberentes Logs integration for a more detailed explanation.
Configuration¶
Note: The plugin can be enabled via command line option --k8sContainerd.
Add the following section to the Logagent configuration file:
inputFilter:
# parse containerd log format, add pod info to log context
- module: input-filter-k8s-containerd
The following example collects container log files, parses cri-o format, parses container logs with default log patterns, and adds Kubernetes meta-data via Kubernetes API before it ships logs to Sematext Cloud:
input:
# make sure files include your cri-o log container folder
files:
- '/var/log/containers/*.log'
inputFilter:
# parse containerd log format, add pod info to log context
- module: input-filter-k8s-containerd
outputFilter:
# add k8s metadata via k8s API
- module: k8s-enrichment
output:
elasticsearch:
module: elasticsearch
url: https://logsene-receiver.sematext.com
index: YOUR_LOGS_TOKEN
Run Logagent:
logagent --config crio.yml