Can custom logs integration in fleet ingest container logs?

Elastic Stack Elastic Agent
1

Hi all,
@warkolm @Baguette
I am trying to fetch kubernetes container logs from elastic-agents, i don't want to use Kubernetes integration to get container logs, is their a way to fetch container logs from custom logs integration by mentioning /var/log/containers/*${kubernetes.container.id}.log path, i tried to configure it in custom logs integration but its not working.
Is it really possible from custom logs integration if so how?

or is their any way we can mention multiple dataset names so we can segregate container logs to different indices in the Kubernetes integration itself.

With Regards,
Abhishek M

2

Hey @Abhi_Abhishek,

In principle it should be possible to use the logs integration to collect any log, including the container logs.

Could you share the configuration you are using?

How are you deploying the agent?

Does the agent has access to the logs files, and permissions to read them?

3

Curious why??... as you can turn off everything else other than the container logs and then that is all it will do...

1 Like