Centralized Logging in K8s with Fluent Bit and Graylog
# Based on https://hub.docker.com/r/graylog/graylog/ | |
# Date: dec. 2018 | |
version: '2' | |
services: | |
# MongoDB: https://hub.docker.com/_/mongo/ | |
mongo: | |
image: mongo:3 | |
# Elasticsearch: https://www.elastic.co/guide/en/elasticsearch/reference/5.5/docker.html | |
elasticsearch: | |
image: docker.elastic.co/elasticsearch/elasticsearch:6.5.1 | |
environment: | |
- http.host=0.0.0.0 | |
# Disable X-Pack security: https://www.elastic.co/guide/en/elasticsearch/reference/5.5/security-settings.html#general-security-settings | |
- xpack.security.enabled=false | |
- "ES_JAVA_OPTS=-Xms512m -Xmx512m" | |
ulimits: | |
memlock: | |
soft: -1 | |
hard: -1 | |
mem_limit: 1g | |
# Graylog: https://hub.docker.com/r/graylog/graylog/ | |
graylog: | |
image: graylog/graylog:2.5.0-1 | |
environment: | |
# CHANGE ME! | |
- GRAYLOG_PASSWORD_SECRET=0123456789_10_11_12 | |
# Password: admin | |
- GRAYLOG_ROOT_PASSWORD_SHA2=8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918 | |
- GRAYLOG_HTTP_EXTERNAL_URI=http://127.0.0.1:9000/ | |
links: | |
- mongo | |
- elasticsearch | |
ports: | |
# Graylog web interface and REST API | |
- 9000:9000 | |
# Syslog TCP | |
- 514:514 | |
# Syslog UDP | |
- 514:514/udp | |
# GELF TCP | |
- 12201:12201 | |
# GELF UDP | |
- 12201:12201/udp |
#!/bin/sh | |
sudo sysctl -w vm.max_map_count=262144 | |
docker-compose -f compose-graylog.yml up |
{ | |
"short_message":"2019/01/13 17:27:34 Metric client health check failed...", | |
"_stream":"stdout", | |
"_timestamp":"2019-01-13T17:27:34.567260271Z", | |
"_k8s_pod_name":"kubernetes-dashboard-6f4cfc5d87-xrz5k", | |
"_k8s_namespace_name":"test1", | |
"_k8s_pod_id":"af8d3a86-fe23-11e8-b7f0-080027482556", | |
"_k8s_labels":{}, | |
"host":"minikube", | |
"_k8s_container_name":"kubernetes-dashboard", | |
"_docker_id":"6964c18a267280f0bbd452b531f7b17fcb214f1de14e88cd9befdc6cb192784f", | |
"version":"1.1" | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment