GKE Stackdriver logging - send SSH logs?

[Scott Brenner]

Two questions regarding this: https://cloud.google.com/kubernetes-engine/docs/how-to/logging

How can I include/ship (node) SSH logs to Stackdriver? I've tried deploying a modified DaemonSet (https://kubernetes.io/docs/tasks/debug-application-cluster/logging-stackdriver/#configuring-stackdriver-logging-agents) but am not seeing anything in Stackdriver for the cluster. Just added this to the ConfigMap:

## read SSH logs
<source>
  type tail
  format syslog
  path /var/log/auth.log
  pos_file /var/log/auth.log.pos
  tag sshd
</source>

-----------

Also, when using the default/built-in Fluentd exporter I'm seeing this:

$kubectl -n kube-system logs fluentd-gcp-v2.0.9-[ID] fluentd-gcp
2018-02-05 22:48:41 +0000 [warn]: 'block' action stops input process until the buffer full is resolved. Check your pipeline this action is fit or not

among other errors. Looks like it's preventing logs from being sent to Stackdriver. Any ideas?

[Scott Brenner]

SSH logs issues has been resolved (was looking at the wrong thing in Stackdriver) but still curious about the buffer full error.