Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

HostTailer includes Fluent-bit logs #1910

Open
sebastiangaiser opened this issue Jan 13, 2025 · 3 comments
Open

HostTailer includes Fluent-bit logs #1910

sebastiangaiser opened this issue Jan 13, 2025 · 3 comments

Comments

@sebastiangaiser
Copy link
Contributor

Hey, we're using a HostTailer for sending Kubernetes cluster audit logs to Opensearch. The logs are getting parsed as json and everything works like like a charm. But unfortunately, the HostTailer Fluent-bit is producing some [ info] [input:tail:tail.0] inotify_fs_remove(): inode=11024910 watch_fd=20 messages.
Is there an option to exclude/remove these logs? Currently they get send to the stderr stream and I can simply exclude them via a grep filter in FluentD but that feels a bit odd.

@csatib02
Copy link
Member

Well I've just tested this out, and unfortunately sinceHostTailer logs to stdout adding:

annotations:
    fluentbit.io/exclude: "true"

would exclude the tailed logs themselves. (Deleting previous comments.)

@kube-logging kube-logging deleted a comment from sebastiangaiser Jan 14, 2025
@kube-logging kube-logging deleted a comment from sebastiangaiser Jan 14, 2025
@kube-logging kube-logging deleted a comment from sebastiangaiser Jan 14, 2025
@sebastiangaiser
Copy link
Contributor Author

sebastiangaiser commented Jan 14, 2025

Indeed, you're right. Maybe I was a bit to euphoric, yesterday

@aslafy-z
Copy link
Collaborator

Maybe one of these way can help:

  • reduce the log level to error with Log_Level error or -qq cli flag
  • disable all logging altogether with Log_Level off (risky)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants