What is the best way to connect logstash to collect Kubernetes cluster logs and send them to graylog?

Question

graylog

Hello, could you tell me

how
1) how best to hook up logstash to build container/pods logs from standard output? Any ready-made solutions?
2) what is the best way to send them to graylog, what protocol or pluginu?
3) What happens if the Graylog cluster becomes unavailable for a while, messages from logstash resume or it will have to be rebooted?

all the best,
Vadim

Answer 1

1. You need a log collector. Most commonly used and more described on the web as a solution for k8s - Fluentd
   
2. https://docs.fluentd.org/how-to-guides/graylog2
   
3. logging will resume as soon as the cluster becomes available