# Filebeat on Kubernetes not collecting logs from master nodes

**URL:** https://discuss.elastic.co/t/filebeat-on-kubernetes-not-collecting-logs-from-master-nodes/197229
**Category:** Beats
**Tags:** filebeat
**Created:** [August 28, 2019, 9:27pm UTC](https://discuss.elastic.co/t/filebeat-on-kubernetes-not-collecting-logs-from-master-nodes/197229 "2019-08-28T21:27:39Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![colincoghill](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/colincoghill/32/53213_2.png) [@colincoghill](https://discuss.elastic.co/u/colincoghill)
#### Post date: [August 28, 2019, 9:27pm UTC](https://discuss.elastic.co/t/filebeat-on-kubernetes-not-collecting-logs-from-master-nodes/197229/1 "2019-08-28T21:27:39Z")

</div>

Hi,

While trying to investigate a problem with our kubernetes cluster I discovered that our filebeat install was not collecting logs from anything running on the "master" nodes. It did when I initially installed filebeat a while ago.

After some digging, I find that a few kubernetes versions ago, they changed it so that DaemonSets (which filebeat uses to deploy on kubernetes) do not deploy to master nodes by default.

I believe the filebeat-kubernetes file at :

> <https://github.com/elastic/beats/blob/master/deploy/kubernetes/filebeat/filebeat-daemonset.yaml>

Needs to be changed to include

```auto
    spec:
      tolerations:
      - key: node-role.kubernetes.io/master
        effect: NoSchedule

```

This works for me.

Am I correct? is this something I should submit as a bug?

links:  
[https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/](https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/)

---

<div class="post-metadata">

### Author: ![jsoriano](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jsoriano/32/27920_2.png) [@jsoriano](https://discuss.elastic.co/u/jsoriano)
#### Post date: [August 29, 2019, 8:56pm UTC](https://discuss.elastic.co/t/filebeat-on-kubernetes-not-collecting-logs-from-master-nodes/197229/2 "2019-08-29T20:56:17Z")

</div>

Hi @colincoghill and welcome 🙂

Thanks for reporting this, I think we should add these tolerations to the reference configuration and/or [to the documentation](https://www.elastic.co/guide/en/beats/filebeat/7.3/running-on-kubernetes.html). I see we already mention something similar for OpenShift.

Please, [submit a bug](https://github.com/elastic/beats/issues/new?template=bug-report.md) for this.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 26, 2019, 8:56pm UTC](https://discuss.elastic.co/t/filebeat-on-kubernetes-not-collecting-logs-from-master-nodes/197229/3 "2019-09-26T20:56:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.