Skip to main content
Sumo Logic

Set up collection for Kubernetes

This page provides an overview of Kubernetes collection process for Kubernetes environments, and then walks you through configuring log and metric collection.

This page provides an overview of the collection process for Kubernetes environments, and then walks you through configuring log and metric collection. The Sumo Logic Kubernetes App provides services for managing and monitoring Kubernetes worker nodes works in conjunction with the Kubernetes Control Plane App that monitors the master node control plane, including the API server, etcd, kube-system, as well as worker nodes. You will set up both of these apps in the configuration process.

Collection overview

Sumo Logic collects logs, events, metrics, and security data with Fluentbit, FluentD, Prometheus, and Falco. These collectors are all open source collectors that are maintained by the cloud native computing foundation (CNCF). The collected data streams through a centralized FluentD pipeline for metadata enrichment. Sumo Logic tags the container, pod, node, and cluster, as well as identifying the service, namespace, and deployment. 

K8s_Centralized_Collection.png

Log and metric types

The Kubernetes Control Plane App uses logs and metrics.

Log sources

The Sumo Logic Kubernetes app uses FluentBit and FluentD to collect logs.

Metric sources
  • Kubernetes API Server Metrics.
  • Scheduler Metrics.
  • Controller Manager Metrics. 
  • Node-exporter Metrics. 
  • kube-state-metrics.

Metrics are collected using Prometheus with FluentD. For additional information on metrics options you can configure for collection, see this document.

Configuring log and metric collection

The Sumo Logic Kubernetes Control Plane App works in conjunction with the  Kubernetes App to monitor the master node control plane, including the API server, etcd, kube-system, as well as worker nodes. You configure log and metric collection when you install the Kubernetes App, as described in this section.

Step 1. Setup and install the Kubernetes App

The Sumo Logic Kubernetes App provides the services for managing and monitoring Kubernetes worker nodes. You must set up collection and  install the Kubernetes App before you install the Kubernetes - Control Plane App. You configure log and metric collection during this process.

To set up and install the Kubernetes app, follow the instructions in this document.

Step 2. Install the Kubernetes Control Plane App 

The process for installing the Kubernetes Control Plane App varies depending on the platform of your cluster. This section provides information on the available Kubernetes platforms. Choose the procedure meant for your cluster environment.

Custom Kubernetes cluster

If you built your own Kubernetes cluster, you should follow the steps recommended in this section. You configured log and metric collection when you installed the Kubernetes App, and are now ready to install the Kubernetes Control Plane App.

To install the Kubernetes Control Plane App, follow the instructions on this page.

Managed service provider

If you are using a managed service provider, you should follow the steps recommended in this section for your managed service. You configured log and metric collection when you installed the Kubernetes App, and are now ready to install the appropriate control plane app for your platform: