Hi,
I have an ELK stack running within Rancher and I want to send Docker container (also managed by rancher) logs using the Docker log drivers. I configured logstash to receive syslog events and exposed a port in the ELK container. On the container, where I want to send the logs from, I configured the syslog-address=tcp://host:port and enabled it.
Now the issue I have is that the ELK stack hostname is not available from the Docker host OS because the logging driver is not aware of the container internal dns server.
I created a workaround by pointing the Docker host OS namespace server to 169.254.169.250 and then use ElkStack_elk_1 as syslog-address…
Is it ok and safe to do so or is there an alternative and better approach to achieve this?
Regards,
Geert