question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

How can my application send logs to different index's for compliance purposes

See original GitHub issue

What happened: Currently i can send all the logs from a pod to a single index. What you expected to happen: We are migrating a lot of EC2 based application to EKS. Some security related logs on ec2 were written on file system and then sent to different index due to retention policy being higher compared to regular log file. In containers all logs go to a single index. Is there a way my application running on a k8s pod can send this to a different index ? How to reproduce it (as minimally and precisely as possible):

Anything else we need to know?:

Environment: EKS

  • Kubernetes version (use kubectl version): 1.14
  • Ruby version (use ruby --version):
  • OS (e.g: cat /etc/os-release): Amaxon Linux 2
  • Splunk version:
  • Others:

Issue Analytics

  • State:closed
  • Created 3 years ago
  • Comments:16 (1 by maintainers)

github_iconTop GitHub Comments

1reaction
rockb1017commented, Jun 2, 2020

@limlengchye could you share the custom conf you are providing to send use multiple HEC token? i think it could be helpful if we can make it more native as well.

1reaction
pc-rshettycommented, May 11, 2020

@matthewmodestino just a gentle reminder

Read more comments on GitHub >

github_iconTop Results From Across the Web

Indexes - Datadog Docs
Note: Logs enter the first index whose filter they match on, use drag and drop on the list of indexes to reorder them...
Read more >
Logging - OWASP Cheat Sheet Series
Application logging should always be included for security events. Application logs are invaluable data for: Identifying security incidents; Monitoring policy ...
Read more >
Configure custom indexing | Cloud Logging
Logging applies custom indexing to data that is ingested after the index was created or changed; changes to custom indexes don't apply to...
Read more >
Exploring logging strategies with the Elastic Stack - kreuzwerker
This blog post will present two log indexing strategies and evaluate ... to send log streams over to a Logstash server where we...
Read more >
What Is Log Management? A Complete Logging Guide - Graylog
Many compliance mandates have log storage and retention requirements, so you should be considering this as part of your log collection.
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found