Have someone managed to create a ClusterLogForwarder from Openshift, and which output worked best?

[AndreasDavour]

Hi

I've tried to create a ClusterLogForwarder in OpenShift, using the http and the syslog outputs. None seem to reach Seq, but I have confirmed the connectivity is there by using curl. Have anyone managed to create a CLF for any of those two outputs that are verified to work? I could use a known working setup to compare to.

[nblumhardt]

Hi Andreas,

I'm not familiar with OpenShift, so hopefully someone with more experience will jump in, but skimming the docs I think the OTLP output is the best bet, even though it's still in preview:

https://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.1/html/configuring_logging/configuring-log-forwarding#configuring-otlp-output_configuring-log-forwarding

The OpenTelemetry protocol is standardized and is natively supported by Seq; the endpoint you need is ingest/otlp/v1/logs, and there's some additional information about protocols and headers included in:

https://datalust.co/docs/opentelemetry-net-sdk-logs

Let me know if this helps, keen to hear how you go!