# Kubernetes with Fluent Bit (without Helm) Copy as Markdown[Open in ChatGPT](https://chatgpt.com/?q=Read%20https%3A%2F%2Fdocs-docusaurus.kinsta.page%2Fintegrations%2Fkubernetes%2Fkubernetes-with-fluent-bit-without-helm.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)[Open in Claude](https://claude.ai/new?q=Read%20https%3A%2F%2Fdocs-docusaurus.kinsta.page%2Fintegrations%2Fkubernetes%2Fkubernetes-with-fluent-bit-without-helm.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.) [![kubernetes versions](https://camo.githubusercontent.com/d764de2d00269731b8386c9369b78a2a9d3d0943/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4b756265726e657465732d312e37253243253230312e38253243253230312e39253243253230312e3130253243253230312e3131253243253230312e3132253243253230312e3133253243253230312e3134253243253230312e3135253243253230312e3136253243253230312e3137253243253230312e31382d626c75652e737667)](https://camo.githubusercontent.com/d764de2d00269731b8386c9369b78a2a9d3d0943/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4b756265726e657465732d312e37253243253230312e38253243253230312e39253243253230312e3130253243253230312e3131253243253230312e3132253243253230312e3133253243253230312e3134253243253230312e3135253243253230312e3136253243253230312e3137253243253230312e31382d626c75652e737667) This tutorial demonstrates how to send your Kubernetes logs to Coralogix using Fluent Bit. Find full instructions in our [GitHub repository](https://github.com/coralogix/telemetry-shippers/tree/master/logs/fluent-bit/k8s-manifest). ## Prerequisites[​](#prerequisites "Direct link to Prerequisites") * Installed Kubernetes Cluster * Enabled RBAC authorization mode support This document includes cluster dependent URL's. Each URL has a variable part (in Italic). Please match this part with a row entry within the following table. Copy the table row entry located under the column that matches your Coralogix [domain](https://docs-docusaurus.kinsta.page/user-guides/account-management/account-settings/coralogix-domain/.md). Replace the variable part of the URL with this entry. \[table id=51 /] ## [](https://github.com/coralogix/integrations-docs/blob/master/integrations/fluent-bit/README.rst#installation-1)Installation[​](#installation "Direct link to installation") First, you should create Kubernetes secret with Coralogix credentials: ``` kubectl -n kube-system create secret generic fluent-bit-coralogix-account-secrets \ --from-literal=CORALOGIX_API_URL= \ --from-literal=PRIVATE_KEY=XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX ``` You should receive something like: ``` secret "fluent-bit-coralogix-account-secrets" created ``` Then you need to create `fluent-bit-coralogix-logger` resources on your Kubernetes cluster with these commands: ``` kubectl create -f https://raw.githubusercontent.com/coralogix/integrations-docs/master/integrations/fluent-bit/kubernetes/fluent-bit-coralogix-rbac.yaml -n monitoring kubectl create -f https://raw.githubusercontent.com/coralogix/integrations-docs/master/integrations/fluent-bit/kubernetes/fluent-bit-coralogix-svc.yaml -n monitoring kubectl create -f https://raw.githubusercontent.com/coralogix/integrations-docs/master/integrations/fluent-bit/kubernetes/fluent-bit-native-coralogix-cm.yaml -n monitoring kubectl create -f https://raw.githubusercontent.com/coralogix/integrations-docs/master/integrations/fluent-bit/kubernetes/fluent-bit-native-coralogix-ds.yaml -n monitoring ``` ### Output[​](#output "Direct link to Output") ``` serviceaccount "fluent-bit-coralogix-service-account" created clusterrole "fluent-bit-coralogix-service-account-role" created clusterrolebinding "fluent-bit-coralogix-service-account" created configmap "fluent-bit-coralogix-config" created daemonset "fluent-bit-coralogix-daemonset" created service "fluent-bit-coralogix-service" created ``` Now `fluent-bit-coralogix-logger` collects logs from your Kubernetes cluster. ## Uninstall[​](#uninstall "Direct link to Uninstall") To remove `fluent-bit-coralogix-logger` from your cluster, execute the following commands: ``` kubectl -n kube-system delete secret fluent-bit-coralogix-account-secrets kubectl -n kube-system delete svc,ds,cm,clusterrolebinding,clusterrole,sa -l k8s-app=fluent-bit-coralogix-logger ``` ## Modifying applicationName and subsystemName[​](#modifying-applicationname-and-subsystemname "Direct link to Modifying applicationName and subsystemName") By default, we use the field `kubernetes.namespace_name` as the applicationName and `kubernetes.container_name` as the subsystemName. ### [](https://github.com/coralogix/telemetry-shippers/tree/master/logs/fluent-bit/k8s-manifest#dynamic)Dynamic[​](#dynamic "Direct link to dynamic") To modify these values and use another value for applicationName and subsystemName, modify the `fluent-bit-http-crxluascript` config map, as demonstrated in the example: ``` { "kubernetes": { "container_name": "generator", "namespace_name": "default", "pod_name": "generator-app-589dbdc98-ghz8j", "container_image": "chentex/random-logger:latest", "container_image_id": "docker-pullable://chentex/random-logger@sha256:7cae589926ce903c65a853c22b4e2923211cc19966ac8f8cc533bbcff335ca39", "pod_id": "330ta782-a1ab-4daa-b3fa-5eb3f3d07fe0", "pod_ip": "177.17.0.4", "host": "minikube", "labels": { "app": "generator", } }, "log": "2022-12-11T16:43:15+0000 DEBUG This is a debug log that shows a log that can be ignored.n", "stream": "stdout", "time": "2022-12-11T16:43:15.906733172Z", } ``` The following example adopts the 'app' label from the Kubernetes object as subsystemName by modifying script.lua and supplying the wanted field in this format: `record.json.`. ``` removed for brevity... new_record["subsystemName"] = record.json.kubernetes.labels.app removed for brevity... ``` !!!! note As this script runs on all logs, make sure to use a field that is present in all the logs or add if/else logic to the lua script. ### [](https://github.com/coralogix/telemetry-shippers/tree/master/logs/fluent-bit/k8s-manifest#static)Static[​](#static "Direct link to static") To change these values and use a hard-coded value as the value of applicationName and subsystemName, modify the `fluent-bit-http-crxluascript` config map. The following example allows all logs to adopt the the applicationName 'my-awesome-app' with a modification of the script.lua. ``` removed for brevity... new_record["applicationName"] = "my-awesome-app" removed for brevity... ``` ## Additional Resources[​](#additional-resources "Direct link to Additional Resources") | | | | ---------------------- | -------------------------------------------------------------------------------------------------- | | External Documentation | [GitHub](https://github.com/coralogix/telemetry-shippers/tree/master/logs/fluent-bit/k8s-manifest) |