AnswerBun.com

Graylog - docker swarm fields

DevOps Asked by Wer Bn on September 29, 2020

I have a Docker swarm with a configured Graylog server and the rest of its stack, along with a Logspout service with a replica in all of the swarm’s nodes

As you might know, docker swarm is composed of stacks that have services that spawn tasks.

Every time a task (equivalent to a container) docker has a policy to restart it.

So, in Graylog what I want to achieve is some kind of aggregation by service name or id, without regard for the task.

The problem is this:
enter image description here

Graylog only has those searchable fields related with docker, by default at least.

In my case, it would be very useful if I had docker_service.
I can imagine some sort of extractor that retrieved this information from the docker service and fed Graylog with other useful stuff: the tasks’s networks, stack, volumes, etc…

There is a similar question here. But the answer doesn’t quite fit. You have to change the log itself for it to work, when you already have that information in the docker engine API.

Is there any way "out of the box" of achieving this

Graylog version: 3.3.2
Docker version: 19.03.12
Logspout version: v3-master

Add your own answers!

Related Questions

Terraform foreach multiple map variables

1  Asked on January 16, 2021 by stravze

 

How to fetch PublishedPort from inspect

0  Asked on January 11, 2021 by executable

   

How to backup Amazon Cognito?

3  Asked on January 8, 2021 by richard-slater

 

Dedicated/Separate Git Repo as Terraform Remote Backend

1  Asked on October 10, 2020 by haneef-ibn-ahmad

   

Graylog – docker swarm fields

0  Asked on September 29, 2020 by wer-bn

   

Ask a Question

Get help from others!

© 2022 AnswerBun.com. All rights reserved. Sites we Love: PCI Database, MenuIva, UKBizDB, Menu Kuliner, Sharing RPP