Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update audit logs docs #5199

Merged
merged 5 commits into from
Jul 7, 2023
Merged

Update audit logs docs #5199

merged 5 commits into from
Jul 7, 2023

Conversation

cr7258
Copy link
Contributor

@cr7258 cr7258 commented Jul 4, 2023

Fix: #5104

  1. Update fluent configuration file to account for new log fields.
  2. Define <match fluent.**> to capture fluentd logs in top level is deprecated. Use <label @FLUENT_LOG> instead.
  3. Remove the kubernetes_metadata plugin filter as it doesn't take effect because <filter kubernetes.**> doesn't match the tag "antrea-networkpolicy" in the source. Additionally, the kubernetes_metadata plugin filter is unable to get the metadata of the container from the antrea audit log due to it is derived from the file name(e.g.,/var/log/containers/fabric8-console-controller-98rqc_default_fabric8-console-container-df14e0d5ae4c07284fa636d739c8fc2e6b52bc344658de7d3f08c36a2e804115.log), the file name /var/log/antrea/networkpolicy/*.log did not provide the container's information.
  4. Add a new snapshot of Kibana and update the example of the log in the docs.

@cr7258 cr7258 changed the title update audit logs docs Update audit logs docs Jul 4, 2023
Copy link
Member

@tnqn tnqn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@cr7258 Thanks for the PR.

docs/antrea-network-policy.md Outdated Show resolved Hide resolved
docs/antrea-network-policy.md Outdated Show resolved Hide resolved
docs/cookbooks/fluentd/README.md Outdated Show resolved Hide resolved
@tnqn tnqn requested review from antoninbas and qiyueyao July 5, 2023 06:26
Copy link
Contributor

@qiyueyao qiyueyao left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1 for <direction>, just one comment on the image.

Signed-off-by: chengzw <[email protected]>
@cr7258 cr7258 requested a review from antoninbas July 6, 2023 22:56
@antoninbas
Copy link
Contributor

/skip-all

@antoninbas antoninbas merged commit 2f5e8bb into antrea-io:main Jul 7, 2023
41 of 43 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

fluentd cookbook for audit logs needs to be updated
4 participants