Describe the task
MISO wants all logging forwarded to the BCGOV SIEM. He specifically identified application and database logs, but let's just include any and all logs as standard moving forward. What this means for us is that we need to write all logs to a pod's STDOUT if they aren't already.
Acceptance Criteria
[ ] Identify any logs that are currently written to file only.
[ ] Write all logs to their pod's STDOUT.
[ ] Continue writing logs to file.
Additional context
Any logs written to a pod's STDOUT is automatically forwarded to SIEM.
I think we can set up a side-car pattern using something like fluent-bit to forward log stream to the Govt SIEM. Do we already have an endpoint/key for the SIEM?
Describe the task MISO wants all logging forwarded to the BCGOV SIEM. He specifically identified application and database logs, but let's just include any and all logs as standard moving forward. What this means for us is that we need to write all logs to a pod's STDOUT if they aren't already.
Acceptance Criteria
Additional context