File tree Expand file tree Collapse file tree 1 file changed +26
-3
lines changed Expand file tree Collapse file tree 1 file changed +26
-3
lines changed Original file line number Diff line number Diff line change @@ -57,26 +57,49 @@ To enable the `in_ebpf` plugin, follow these steps to build Fluent Bit from sour
57
57
Run Fluent Bit with elevated permissions (for example, ` sudo ` ). Loading eBPF programs requires root access or appropriate privileges.
58
58
59
59
``` bash
60
- sudo ./bin/fluent-bit -c path/to/your_config.conf
60
+ # For YAML configuration.
61
+ $ sudo ./bin/fluent-bit --config fluent-bit.yaml
62
+
63
+ # For classic configuration.
64
+ $ sudo ./bin/fluent-bit --config fluent-bit.conf
61
65
```
62
66
63
67
## Configuration example
64
68
65
69
Here's a basic example of how to configure the plugin:
66
70
67
- ``` python
71
+ {% tabs %}
72
+ {% tab title="fluent-bit.yaml" %}
73
+
74
+ ``` yaml
75
+ pipeline :
76
+ inputs :
77
+ - name : ebpf
78
+ trace :
79
+ - trace_signal
80
+ - trace_malloc
81
+ - trace_bind
82
+ ` ` `
83
+
84
+ {% endtab %}
85
+ {% tab title="fluent-bit.conf" %}
86
+
87
+ ` ` ` text
68
88
[INPUT]
69
89
Name ebpf
70
90
Trace trace_signal
71
91
Trace trace_malloc
72
92
Trace trace_bind
73
93
```
74
94
95
+ {% endtab %}
96
+ {% endtabs %}
97
+
75
98
The configuration enables tracing for:
76
99
77
100
- Signal handling events (` trace_signal ` )
78
101
- Memory allocation events (` trace_malloc ` )
79
102
- Network bind operations (` trace_bind ` )
80
103
81
104
You can enable multiple traces by adding multiple ` Trace ` directives in your configuration.
82
- Full list of existing traces can be seen here: [ Fluent Bit eBPF Traces] ( https://github.com/fluent/fluent-bit/tree/master/plugins/in_ebpf/traces )
105
+ Full list of existing traces can be seen here: [ Fluent Bit eBPF Traces] ( https://github.com/fluent/fluent-bit/tree/master/plugins/in_ebpf/traces )
You can’t perform that action at this time.
0 commit comments