Closed th-2021 closed 2 months ago
It can be done by fixing the rsyslog config, however you may be better off using a dedicated log shipping app like fluentbit to deliver logs to ELK, Grafana cloud, etc. I use grafana cloud's free tier to display various metrics, dashboards and logs.
Sure. I came across this because pilerimport just exited without any output. Later I found in /var/log/syslog: "cannot connect to manticore...". A message like this should imho be also shown on stderr.
It's possible, however, I still believe that all logs should be at a single place.
In kubernetes logs are shown with kubectl logs ... (simple logging). The logs with piler are in /var/log and not shown this way. One solution would be to send important messages to /dev/stdout (in rsyslog config).