Step 6. Configure kube auditing #20
Description
Which topic are you reporting about?
What do you think needs to be updated?
If you have configured kube auditing, when you use IBM Cloud Logs you need to install the IBM Cloud Logs agent. You also need to change the Path in the tail INPUT section of the input-kubernetes.conf file to include:
Given Path does not list the audit-logs(verb,user details and actions) in cloud-logs instance:
/var/log/kubelet/kubelet.log,/var/log/syslog
Path needs to be updated in documentation to get the audit-logs in cloud-logs instance:
/var/log/kubelet/kubelet.log,/var/log/syslog,/var/log/containers/ibmcloud-kube-audit-*.log
Anything else?
I have tested below mentioned path and we are able to see the audit-logs in cloud-logs instance:
/var/log/kubelet/kubelet.log,/var/log/syslog,/var/log/containers/ibmcloud-kube-audit-*.log
Same we have suggested to the IBM-Cloud team in Cloud case, artifact attached how we get this path
