fluentd not consuming from kafka

193 views
Skip to first unread message

Mohammad Mousavi

unread,
Sep 2, 2021, 7:16:32 AM9/2/21
to Fluent Bit
Hi, I have a EFK stack on k8s. There is a dumy app that generates logs and I collect the logs via fluent Bit and put in on a single node kafka, on the other side there is a deamon set  of fluentd that consume the logs from the topic and insert it on elasticsearch. so far everything is fine. I came up with a scenario that fluentd is crashed. when I delete the replicaset from k8s and create it again after a while, I expect that fluentd starts to consume the logs from topic where it left it. But it ignore it and start to insert new logs to elasticseach and a now there is a gap in elasticseach. I checked the `time` on logs but the gap is not in them. 
1.PNG

This is my config files:
fluent-bit: 
```
    [INPUT]
        Name              tail
        Tag               docker-log-gen.*
        Path              /var/log/containers/docker-log-generator*.log
        Parser            docker
        DB                /var/log/flb_kube.db
        Mem_Buf_Limit     100MB
        Skip_Long_Lines   On
        Refresh_Interval  10

    [OUTPUT]
        Name            kafka
        Match           docker-log-gen.*
        Brokers         kafka-service:9092
        Logstash_Format Off
        topics          fluentbit-docker-log-gen
        Replace_Dots    On
        Retry_Limit     False
```
fluentd:
```
<source>
   @type  kafka
   @log_level info
   brokers  kafka-service
   topics fluentbit-docker-log-gen
   time_key time
</source>
<match *>
   @type elasticsearch
   time_key time
   ....
</match>
```
I will be very appreciate it if you can help with that.
Thanx a lot

Eduardo Silva

unread,
Sep 2, 2021, 11:31:27 AM9/2/21
to Mohammad Mousavi, Fluent Bit
Hi, 

please reach out to the Fluentd mailing list since seems the problem is on that side, 

thanks

--
You received this message because you are subscribed to the Google Groups "Fluent Bit" group.
To unsubscribe from this group and stop receiving emails from it, send an email to fluent-bit+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/fluent-bit/9b231734-c0cc-4c27-b21f-f23353bdb0d9n%40googlegroups.com.


--
Reply all
Reply to author
Forward
0 new messages