Skip to content

Commit 8d96c46

Browse files
IvanHuntersIvanHunters
committed
fix(monitoring-agents): isolate merged log payload under log_processed
Fluent Bit's kubernetes filter runs with Merge_Log On but without Merge_Log_Key, so a parsed JSON log line is merged into the record root. An application log line can thereby forge the service fields that later pipeline stages rely on for routing and tenant isolation (kubernetes_namespace_name, kubernetes.labels, tenant, cluster, log_source). Setting Merge_Log_Key log_processed nests the parsed payload under a dedicated key so application content can no longer override top-level service fields. Applies to both the platform (system/monitoring-agents) and guest (apps/kubernetes) Fluent Bit configurations. Assisted-by: LLM Signed-off-by: IvanHunters <[email protected]>
1 parent 048c029 commit 8d96c46

2 files changed

Lines changed: 2 additions & 0 deletions

File tree

‎packages/apps/kubernetes/templates/helmreleases/monitoring-agents.yaml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -81,6 +81,7 @@ spec:
8181
Name kubernetes
8282
Match kube.*
8383
Merge_Log On
84+
Merge_Log_Key log_processed
8485
Keep_Log On
8586
K8S-Logging.Parser On
8687
K8S-Logging.Exclude On

‎packages/system/monitoring-agents/values.yaml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -450,6 +450,7 @@ fluent-bit:
450450
Name kubernetes
451451
Match kube.*
452452
Merge_Log On
453+
Merge_Log_Key log_processed
453454
Keep_Log On
454455
K8S-Logging.Parser On
455456
K8S-Logging.Exclude On

0 commit comments

Comments
 (0)