fluent-plugin-systemd

fluent-plugin-systemd copied to clipboard

Hi Team,

we are leveraging Fedora Core OS and want to gather systemd logs.

For some reason the plugin is not gathering logs. It is being added without issues though.

Same setup on Ubuntu based system and logs are gathered.

`<source>
   @type systemd
    tag log.sre.systemd
    path /var/log/journal 
    read_from_head true
  <storage>
    @type local
    path /var/tmp/fluentd/tail_position/systemd-cursor.json
  </storage>

  <entry>
    fields_strip_underscores true
    fields_lowercase true
  </entry> 
</source>
`

My first idea was that it was related to SELinux so I disabled it to test but still. Do you have any idea why it won't work. Fedora Core OS support for the plugin would be amazing.

That actually looks like a permission problem as stated in https://github.com/fluent-plugins-nursery/fluent-plugin-systemd#when-i-look-at-fluentd-logs-everything-looks-fine-but-no-journal-logs-are-read-

Journal files are, by default, owned and readable by the "systemd-journal" system group but are not writable. Adding a user to this group thus enables her/him to read the journal files.

I had the same on the initial deployment.