rsyslog
will be configured so that all cluster members will send system logs to a centralized cluster member.- The central logging server will be the 1st server defined in the inventory group
k3s_control
.- When Ansible detects it is being run on this host it will configure it to be the central logging host.
- All other hosts will be configured as logging clients.
NOTE: Don't change which member is the centralized logging server name once deployed. It can create logging loops and other weird side effects.
The Containerd Settings are in variable namespace install.os.central_logging
.
The directory where all system logs will be stored on the centralized logging server:
install:
os:
central_logging:
log_path: "/var/log/central" # Directory on central server to hold logs
A utility called lnav
can be used to watch centralized system logs in real-time:
$ lnav
# From an account without native access
sudo lnav /var/log/central
Screen shot of lnav: