Skip to content

Commit 81a9fbe

Browse files
authored
Adding YAML examples to input plugin ebpf docs. Fixes #1782. (#1783)
Signed-off-by: Eric D. Schabell <[email protected]>
1 parent a832c8b commit 81a9fbe

File tree

1 file changed

+26
-3
lines changed

1 file changed

+26
-3
lines changed

pipeline/inputs/ebpf.md

Lines changed: 26 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -57,26 +57,49 @@ To enable the `in_ebpf` plugin, follow these steps to build Fluent Bit from sour
5757
Run Fluent Bit with elevated permissions (for example, `sudo`). Loading eBPF programs requires root access or appropriate privileges.
5858

5959
```bash
60-
sudo ./bin/fluent-bit -c path/to/your_config.conf
60+
# For YAML configuration.
61+
$ sudo ./bin/fluent-bit --config fluent-bit.yaml
62+
63+
# For classic configuration.
64+
$ sudo ./bin/fluent-bit --config fluent-bit.conf
6165
```
6266

6367
## Configuration example
6468

6569
Here's a basic example of how to configure the plugin:
6670

67-
```python
71+
{% tabs %}
72+
{% tab title="fluent-bit.yaml" %}
73+
74+
```yaml
75+
pipeline:
76+
inputs:
77+
- name: ebpf
78+
trace:
79+
- trace_signal
80+
- trace_malloc
81+
- trace_bind
82+
```
83+
84+
{% endtab %}
85+
{% tab title="fluent-bit.conf" %}
86+
87+
```text
6888
[INPUT]
6989
Name ebpf
7090
Trace trace_signal
7191
Trace trace_malloc
7292
Trace trace_bind
7393
```
7494

95+
{% endtab %}
96+
{% endtabs %}
97+
7598
The configuration enables tracing for:
7699

77100
- Signal handling events (`trace_signal`)
78101
- Memory allocation events (`trace_malloc`)
79102
- Network bind operations (`trace_bind`)
80103

81104
You can enable multiple traces by adding multiple `Trace` directives in your configuration.
82-
Full list of existing traces can be seen here: [Fluent Bit eBPF Traces](https://github.com/fluent/fluent-bit/tree/master/plugins/in_ebpf/traces)
105+
Full list of existing traces can be seen here: [Fluent Bit eBPF Traces](https://github.com/fluent/fluent-bit/tree/master/plugins/in_ebpf/traces)

0 commit comments

Comments
 (0)