Logs Forwarder
In order to forward logs to your preferred logging platform, you can use the Permit Logs Forwarder. Currently we support forwarding logs to ElasticSearch and stdout of the FluentBit container.
What is FluentBit
Fluent Bit is a lightweight, and highly scalable logging and metrics processor and forwarder. Fluent Bit CNCF graduated project under the umbrella of Fluentd. For more information Fluent Bit.
Enabling Logs Forwarder
Use the PDP's values.yaml:
- Swtich
pdp.logs_forwarder.enabledtotrue. - Set the
pdp.logs_forwarder.typeto the desired log forwarder type,elasticsearchorstdout. 2.1 If you choose ElasticSearch, set thepdp.logs_forwarder.elasticsearch.hostto the desired ElasticSearch host. 2.2 If you choose ElasticSearch, set thepdp.logs_forwarder.elasticsearch.portto the desired ElasticSearch port. 2.3 If you choose ElasticSearch, set thepdp.logs_forwarder.elasticsearch.indexto the desired ElasticSearch index. 2.4 If you choose ElasticSearch, set thepdp.logs_forwarder.elasticsearch.cloud_authto the desired ElasticSearch username and password as the following{user}:{password}. - Optional - Set the
pdp.logs_forwarder.debug_modetotrueto enable debug logs of FluentBit container.
How it works
Once pdp.logs_forwarder.enabled is set to true, the logs will be forwarded to the desired log forwarder type by FluentBit sidecar container.
The PDP container will save the logs to /tmp/pdp.log file, and the FluentBit sidecar container will read the logs from this file, filtering the Decision Logs and forward them to the desired log forwarder type.