summaryrefslogtreecommitdiffstats
path: root/roles/openshift_logging
diff options
context:
space:
mode:
authorJosef Karasek <jkarasek@redhat.com>2017-10-03 14:17:18 +0200
committerJosef Karasek <jkarasek@redhat.com>2017-10-11 17:25:26 +0200
commitbd53ea8112dbeab5a579bf204b235f52c05203c7 (patch)
treebed2b21cc893a6162afc6a7f32f9c0427a35b40e /roles/openshift_logging
parent0db302a8eb8cef17fe20ef651cad6e4cb3308d2b (diff)
downloadopenshift-bd53ea8112dbeab5a579bf204b235f52c05203c7.tar.gz
openshift-bd53ea8112dbeab5a579bf204b235f52c05203c7.tar.bz2
openshift-bd53ea8112dbeab5a579bf204b235f52c05203c7.tar.xz
openshift-bd53ea8112dbeab5a579bf204b235f52c05203c7.zip
Add switch to enable/disable container engine's audit log being stored in ES.
If enabled, tho logs are stored in ES' operations index, accesible only by cluster admins.
Diffstat (limited to 'roles/openshift_logging')
-rw-r--r--roles/openshift_logging/README.md3
1 files changed, 3 insertions, 0 deletions
diff --git a/roles/openshift_logging/README.md b/roles/openshift_logging/README.md
index 829c78728..69eb9283d 100644
--- a/roles/openshift_logging/README.md
+++ b/roles/openshift_logging/README.md
@@ -69,6 +69,9 @@ When `openshift_logging_install_logging` is set to `False` the `openshift_loggin
- `openshift_logging_fluentd_buffer_size_limit`: Buffer chunk limit for Fluentd. Defaults to 1m.
- `openshift_logging_fluentd_file_buffer_limit`: Fluentd will set the value to the file buffer limit. Defaults to '1Gi' per destination.
+- `openshift_logging_fluentd_audit_container_engine`: When `openshift_logging_fluentd_audit_container_engine` is set to `True`, the audit log of the container engine will be collected and stored in ES.
+- `openshift_logging_fluentd_audit_file`: Location of audit log file. The default is `/var/log/audit/audit.log`
+- `openshift_logging_fluentd_audit_pos_file`: Location of fluentd in_tail position file for the audit log file. The default is `/var/log/audit/audit.log.pos`
- `openshift_logging_es_host`: The name of the ES service Fluentd should send logs to. Defaults to 'logging-es'.
- `openshift_logging_es_port`: The port for the ES service Fluentd should sent its logs to. Defaults to '9200'.