Skip to content

Commit 3b6f31f

Browse files
dkirov-ddclaude
andcommitted
Add support for vault-enterprise container image in log pipeline
Update the Vault log pipeline filter to accept logs from both vault and vault-enterprise container images. This enables automatic log processing for Vault Enterprise deployments in Kubernetes where the sidecar container image name differs from the standard Vault image. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
1 parent b157e37 commit 3b6f31f

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

vault/assets/logs/vault.yaml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -128,16 +128,16 @@ pipeline:
128128
name: Vault
129129
enabled: true
130130
filter:
131-
query: source:vault
131+
query: source:vault OR source:vault-enterprise
132132
processors:
133133
- type: grok-parser
134134
name: Parsing Vault Server logs
135135
enabled: true
136136
source: message
137137
samples:
138138
- 2019-11-04T17:48:44.226-0800 [WARN] no `api_addr` value specified in config or in VAULT_API_ADDR; falling back to detection if possible, but this value should be manually set
139-
- '2019-11-04T17:48:58.967-0800 [DEBUG] core: starting cluster listeners'
140-
- '2019-11-04T17:48:58.967-0800 [INFO] core.cluster-listener: starting listener: listener_address=0.0.0.0:8201'
139+
- "2019-11-04T17:48:58.967-0800 [DEBUG] core: starting cluster listeners"
140+
- "2019-11-04T17:48:58.967-0800 [INFO] core.cluster-listener: starting listener: listener_address=0.0.0.0:8201"
141141
grok:
142142
supportRules: |
143143
_date %{date("yyyy-MM-dd'T'HH:mm:ss.SSSZ"):timestamp}

0 commit comments

Comments
 (0)