Logstash is not getting Kubernetes Metadata for logs coming from S3


I have setup ELK-FluentBit stack in Kubernetes cluster. I'm pushing my application logs in cluster to S3 using FluentBit and adding those logs to ELK using S3-input plugin of Logstash. [App Logs --> FluentBit --> S3 --> S3-input-plugin --> Logstash --> Elasticsearch/Kibana]

I'm not seeing Kubernetes metadata fields like pod-name, namespace, node-name in Field Filter in Kibana for these logs.

FluentBit is adding Kubernetes metadata into logs. In log these fields are present but kibana is not showing those fields in Filter.

I'm seeing only following fields,

Please help me in this topic.


This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.