Otis Gospodnetić

@penetest are you trying to send Kubernetes audit logs to Sematext or some place else?

What is the HTTP URL you are referring to? Can you paste it here please?

Yeah. But I am asking what URL *you* are using? Where exactly - to which URL/endpoint - is your Logagent configured to send k8s audit logs?

Did this work for you, @penetest ?

Hm, I'm not sure, but here are some ideas: * Does that directory actually exist? * Can the user running Logagent actually write in it and create subdirectories? * Have...

@VENNUKAL were you able to look into this?

We could accept a good PR.

Just for reference, this is what Logstash may add: https://github.com/elastic/logstash/pull/5917

... or simply check periodically?

Related to #158