fluent-bit overall setup

warning / lessons learned

beware of indentation (needs to be consistent across the file)

install

setup

    cd /etc/fluent-bit/
    mv -i fluent-bit.conf fluent-bit.conf.dist
    grep -vE '^[[:space:]]*(#|$)' fluent-bit.conf.dist > fluent-bit.conf.clean
    grep -vE '^[[:space:]]*(#|$)' fluent-bit.conf.dist > fluent-bit.conf
    vi fluent-bit.conf

for some host system [SERVICE] parsers_file parsers.conf log_file /var/log/fluent-bit.log

for slackware

    daemon on

for k8s/argocd [SERVICE] parsers_file parsers.conf http_server on health_check on

and see sample configs ==> flb-*

ready to go

    tail -F /var/log/fluent-bit*log

debian

enable

    systemctl list-unit-files | grep fluent # not yet
    systemctl enable fluent-bit.service

operate

    systemctl restart fluent-bit
    systemctl status fluent-bit
    journalctl -xeu fluent-bit

slackware

enable

    cd /etc/rc.d/
    vi rc.local

# self-verbose
fluent-bit --daemon -c /etc/fluent-bit/fluent-bit.conf

status

pgrep -a fluent-bit

resources

https://docs.fluentbit.io/manual/administration/configuring-fluent-bit/classic-mode/configuration-file

https://docs.fluentbit.io/manual/administration/configuring-fluent-bit/classic-mode/variables

alternatives

https://www.cncf.io/blog/2022/02/10/logstash-fluentd-fluent-bit-or-vector-how-to-choose-the-right-open-source-log-collector/

FW https://medium.com/ibm-cloud/log-collectors-performance-benchmarking-8c5218a08fea