As an OpenShift Container Platform cluster administrator, you can deploy cluster logging to
aggregate logs for a range of OpenShift Container Platform services.
The cluster logging components are based upon Elasticsearch, Fluentd or Rsyslog, and Kibana.
The collector, Fluentd, is deployed to each node in the OpenShift Container Platform cluster.
It collects all node and container logs and writes them to Elasticsearch (ES).
Kibana is the centralized, web UI
where users and administrators can create rich visualizations and dashboards with the aggregated data.
OpenShift Container Platform cluster administrators can deploy cluster logging using a few
CLI commands and the OpenShift Container Platform web console to install the Elasticsearch
Operator and Cluster Logging Operator. When the operators are installed, create
a Cluster Logging Custom Resource (CR) to schedule cluster logging pods and
other resources necessary to support cluster logging. The operators are
responsible for deploying, upgrading, and maintaining cluster logging.
You can configure cluster logging by modifying the Cluster Logging Custom Resource (CR), named
The CR defines a complete cluster logging deployment that includes all the components
of the logging stack to collect, store and visualize logs. The Cluster Logging Operator watches the
Custom Resource and adjusts the logging deployment accordingly.
Administrators and application developers can view the logs of the projects for which they have view access.