File tree Expand file tree Collapse file tree 1 file changed +26
-3
lines changed Expand file tree Collapse file tree 1 file changed +26
-3
lines changed Original file line number Diff line number Diff line change @@ -57,26 +57,49 @@ To enable the `in_ebpf` plugin, follow these steps to build Fluent Bit from sour
5757 Run Fluent Bit with elevated permissions (for example, ` sudo ` ). Loading eBPF programs requires root access or appropriate privileges.
5858
5959 ``` bash
60- sudo ./bin/fluent-bit -c path/to/your_config.conf
60+ # For YAML configuration.
61+ $ sudo ./bin/fluent-bit --config fluent-bit.yaml
62+
63+ # For classic configuration.
64+ $ sudo ./bin/fluent-bit --config fluent-bit.conf
6165 ```
6266
6367## Configuration example
6468
6569Here's a basic example of how to configure the plugin:
6670
67- ``` python
71+ {% tabs %}
72+ {% tab title="fluent-bit.yaml" %}
73+
74+ ``` yaml
75+ pipeline :
76+ inputs :
77+ - name : ebpf
78+ trace :
79+ - trace_signal
80+ - trace_malloc
81+ - trace_bind
82+ ` ` `
83+
84+ {% endtab %}
85+ {% tab title="fluent-bit.conf" %}
86+
87+ ` ` ` text
6888[INPUT]
6989 Name ebpf
7090 Trace trace_signal
7191 Trace trace_malloc
7292 Trace trace_bind
7393```
7494
95+ {% endtab %}
96+ {% endtabs %}
97+
7598The configuration enables tracing for:
7699
77100- Signal handling events (` trace_signal ` )
78101- Memory allocation events (` trace_malloc ` )
79102- Network bind operations (` trace_bind ` )
80103
81104You can enable multiple traces by adding multiple ` Trace ` directives in your configuration.
82- Full list of existing traces can be seen here: [ Fluent Bit eBPF Traces] ( https://github.com/fluent/fluent-bit/tree/master/plugins/in_ebpf/traces )
105+ Full list of existing traces can be seen here: [ Fluent Bit eBPF Traces] ( https://github.com/fluent/fluent-bit/tree/master/plugins/in_ebpf/traces )
You can’t perform that action at this time.
0 commit comments