Send docker logs to fluentd over tls using the fluentd driver. #5052

nitrogene · 2022-03-10T14:28:47Z

nitrogene
Mar 10, 2022

I managed to send logs from a container running a fluentbit client to a container running an instance of fluentd via tls.

Here is the relevant part of the fluentbit client configuration file:

[OUTPUT]
    Name forward
    Match *
    Host some-fluentd
    Port 24224
    tls On
    tls.verify On
    tls.ca_file /run/secrets/ca_certificate
    tls.crt_file /run/secrets/client_certificate
    tls.key_file /run/secrets/private_client_key
    tls.key_passwd ${TLS_PRIVATE_KEY_PASSPHRASE}
    Shared_Key  ${SHARED_KEY}

And for the fluentd configuration file:

<source>
  @type  forward
  port  24224
  <security>
    self_hostname fluentd
    shared_key "#{ENV["SHARED_KEY"]}"
  </security>
  <transport tls>
    version TLSv1_2
    ca_path                /run/secrets/ca_certificate
    cert_path              /run/secrets/server_certificate
    private_key_path       /run/secrets/private_server_key
    private_key_passphrase "#{ENV["TLS_PRIVATE_KEY_PASSPHRASE"]}"
    client_cert_auth       true
  </transport>
</source>

The fluentd instance can successfully send the logs produced by the fluentbit client to a graylog server. But I can't see anymore the logs sent by docker (using fluentd driver) to the fluentd container. For information, here's an extract of my docker-compose file:

version: '3'
services:
    # MongoDB: https://hub.docker.com/_/mongo/
    mongo:
      image: mongo:4.4.12
      container_name: some-mongo
      hostname: some-mongo
      volumes:
        - mongo-storage:/data/db:rw
      networks:
        - graylog
      restart: unless-stopped
      depends_on:
        - fluentd
      logging:
        driver: fluentd
        options:
          fluentd-address: localhost:24224
          tag: "docker.{{.Name}}"

Shouldn't I configure the logging driver to dial via fluentd container via tls ?How ?

Regards,

Jean-Pierre

fujimotos · 2022-03-11T04:43:09Z

fujimotos
Mar 11, 2022
Maintainer

Transferred from Fluentd discussion forum.

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Send docker logs to fluentd over tls using the fluentd driver. #5052

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Send docker logs to fluentd over tls using the fluentd driver. #5052

Uh oh!

nitrogene Mar 10, 2022

Replies: 1 comment

Uh oh!

fujimotos Mar 11, 2022 Maintainer

nitrogene
Mar 10, 2022

fujimotos
Mar 11, 2022
Maintainer