From bd53ea8112dbeab5a579bf204b235f52c05203c7 Mon Sep 17 00:00:00 2001 From: Josef Karasek Date: Tue, 3 Oct 2017 14:17:18 +0200 Subject: Add switch to enable/disable container engine's audit log being stored in ES. If enabled, tho logs are stored in ES' operations index, accesible only by cluster admins. --- roles/openshift_logging_fluentd/defaults/main.yml | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'roles/openshift_logging_fluentd/defaults') diff --git a/roles/openshift_logging_fluentd/defaults/main.yml b/roles/openshift_logging_fluentd/defaults/main.yml index 82326bdd1..25f7580a4 100644 --- a/roles/openshift_logging_fluentd/defaults/main.yml +++ b/roles/openshift_logging_fluentd/defaults/main.yml @@ -56,3 +56,7 @@ openshift_logging_fluentd_aggregating_passphrase: none #fluentd_secureforward_contents: openshift_logging_fluentd_file_buffer_limit: 1Gi + +# Configure fluentd to tail audit log file and filter out container engine's logs from there +# These logs are then stored in ES operation index +openshift_logging_fluentd_audit_container_engine: False -- cgit v1.2.1