vector icon indicating copy to clipboard operation
vector copied to clipboard

Collect kubernetes audit logs

Open binarylogic opened this issue 6 years ago • 2 comments

This page outlines how to collect Kubernetes audit logs. I'd like to also add our own example to the list here.

A few questions for this issue:

  1. Is there anything additional we need to do to collect this data?
  2. I'd like to see what our docs would look like on this page so that we can add it.

binarylogic avatar Dec 23 '19 19:12 binarylogic

  1. Is there anything additional we need to do to collect this data?

We'll need to deploy vector is a specific way - we'll cover this out of the box for the users via our Helm Chart(s?).

  1. I'd like to see what our docs would look like on this page so that we can add it.

The exact details will be available later, but we will expose this via our Helm Chart, and configuring that is done via values.yml. In general, we should get ready for pretty much the whole AuditPolicy. Maybe offer an intelligent configurator like we have for vector.toml?

MOZGIII avatar Sep 27 '20 01:09 MOZGIII

What's the status here? How can be audit logs for kubernetes / openshift configured as source in vector?

Is file source a good option?

cassanellicarlo avatar Apr 24 '24 13:04 cassanellicarlo