We are in the process of migrating from Openshift 3.11 to Openshift 4.5. We managed to get the Filebeat daemonset working to ship pod logs, but we also need to index the journalctl logs from the coreos hosts. What is currently the recommended way to do this?
Should we use Journalbeat? As a daemonset? I read something about a journald module for Filebeat, but this module hasn't been released apparently.
Please suggest how we can index journald logs from the coreos hosts.