Add Elasticsearch as a Receiver

You can use Elasticsearch, Kafka, and Fluentd as log receivers in KubeSphere. This tutorial demonstrates how to add an Elasticsearch receiver.

Prerequisites

• You need a user granted a role including the permission of Cluster Management. For example, you can log in to the console as admin directly or create a new role with the permission and assign it to a user.

• Before adding a log receiver, you need to enable any of the logging, events or auditing components. For more information, see Enable Pluggable Components. logging is enabled as an example in this tutorial.

Add Elasticsearch as a Receiver

1. Log in to KubeSphere as admin. Click Platform in the upper-left corner and select Cluster Management.

   Note

   If you have enabled the multi-cluster feature, you can select a specific cluster.

2. On the navigation pane on the left, click Cluster Settings > Log Receivers.

3. Click Add Log Receiver and choose Elasticsearch.

4. Provide the Elasticsearch service address and port number.

5. Elasticsearch will appear in the receiver list on the Log Receivers page, the status of which is Collecting.

6. To verify whether Elasticsearch is receiving logs sent from Fluent Bit, click Log Search in the Toolbox in the lower-right corner and search logs on the console. For more information, read Log Query.

Thanks for the feedback. If you have a specific question about how to use KubeSphere, ask it on Slack. Open an issue in the GitHub repo if you want to report a problem or suggest an improvement.