Graylog - docker swarm fields

DevOps Asked by Wer Bn on September 29, 2020

I have a Docker swarm with a configured Graylog server and the rest of its stack, along with a Logspout service with a replica in all of the swarm’s nodes

As you might know, docker swarm is composed of stacks that have services that spawn tasks.

Every time a task (equivalent to a container) docker has a policy to restart it.

So, in Graylog what I want to achieve is some kind of aggregation by service name or id, without regard for the task.

The problem is this:
enter image description here

Graylog only has those searchable fields related with docker, by default at least.

In my case, it would be very useful if I had docker_service.
I can imagine some sort of extractor that retrieved this information from the docker service and fed Graylog with other useful stuff: the tasks’s networks, stack, volumes, etc…

There is a similar question here. But the answer doesn’t quite fit. You have to change the log itself for it to work, when you already have that information in the docker engine API.

Is there any way "out of the box" of achieving this

Graylog version: 3.3.2
Docker version: 19.03.12
Logspout version: v3-master

Add your own answers!

Related Questions

Terraform foreach multiple map variables

1  Asked on January 16, 2021 by stravze


How to fetch PublishedPort from inspect

0  Asked on January 11, 2021 by executable


How to backup Amazon Cognito?

3  Asked on January 8, 2021 by richard-slater


Dedicated/Separate Git Repo as Terraform Remote Backend

1  Asked on October 10, 2020 by haneef-ibn-ahmad


Graylog – docker swarm fields

0  Asked on September 29, 2020 by wer-bn


Ask a Question

Get help from others!

© 2022 All rights reserved. Sites we Love: PCI Database, MenuIva, UKBizDB, Menu Kuliner, Sharing RPP