Make Your Logs Work for You

The days of logging in to servers and manually viewing log files are over. SolarWinds® Papertrail™ aggregates logs from applications, devices, and platforms to a central location.

View Technology Info

FEATURED TECHNOLOGY

Kubenetes Cluster Logging Kubernetes Logging AWS Log Management GC Log Analyzer AWS Logging Docker Logging Docker Syslog Heroku Logging Logging Tools for Azure App

Troubleshoot Fast and Enjoy It

SolarWinds® Papertrail™ provides cloud-based log management that seamlessly aggregates logs from applications, servers, network devices, services, platforms, and much more.

View Capabilities Info

FEATURED CAPABILITIES

Log Viewer Firewall Log Analyzer Centralized Log Management Log Analysis Tail Logging Cron Job Monitoring Log Aggregator Cloud Logging

Aggregate and Search Any Log

SolarWinds® Papertrail™ provides lightning-fast search, live tail, flexible system groups, team-wide access, and integration with popular communications platforms like PagerDuty and Slack to help you quickly track down customer problems, debug app requests, or troubleshoot slow database queries.

View Languages Info

FEATURED LANGUAGES

Linux Logging Software Linux Log Management Ruby Logging Manager Golang Logging HAproxy Log Analyzer MySQL Logging NGINX Logging Javascript Logging Tomcat Logging Apache Log Analyzer

Administrator Guide
- Documentation for Papertrail
Collect Logs
Collect Logs: Apps & Services
Collect Logs: Hosting Services
Collect Logs: Integrations
- Fluentd
- Librato
- Amazon CloudWatch
- StatHat
- Amazon SNS
- HostedGraphite
- Datadog
- Zapier
- VictorOps
- New Relic traces
- Slack
- Campfire
- PagerDuty
- New Relic Insights
- Pushover
- AppOptics
- Geckoboard
- OpsGenie
- Honeybadger
Manage Logs
Send Logs for Analytics
SolarWinds Users & Orgs
Support and Security
- Security and Compliance
- Support Policy
What's New
- Papertrail Release Notes

Kubernetes cluster logging with rKubelog

rKubelog is a simple way to send logs from a Kubernetes (K8s) cluster to Papertrail without having to configure DaemonSets, sidecars, fluentd, or persistent claims. With rKubelog, it’s easy to use Papertrail for logging in nodeless clusters, such as EKS on Fargate, and is perfect for smaller, local development clusters to setup logging within seconds.

Logs can also be sent from a Kubernetes cluster using a SolarWinds Snap Agent installed on your host. Alternatively, you can manually configure your Kubernetes cluster to send logs without using the tools developed by SolarWinds.

rKubelog releases are referenced explicitly; ‘latest’ tags are not used. To update the image to the latest release, use the release’s current version:

ghcr.io/solarwinds/rkubelog:<github_version>

where <github_version> is the latest version listed in Releases. For example, when r16 was the most recent release, ghcr.io/solarwinds/rkubelog:r16 would have been used.

SolarWinds recommends that you subscribe to notifications of new releases in the rKubelog repo by clicking Watch and selecting Releases only from the drop-down.

Deploy rKubelog

By default, rKubelog runs in the kube-system namespace and will observe all logs from all pods in all namespaces except from itself or from any other service in kube-system.

In Papertrail, click Settings, select Log Destinations, and click Create Log Destination. Ensure the default option to Accept connections via Port is selected. Click Create and take note of the <log destination host>:<log destination port> that displays at the top of the relevant log destination card on the Log Destinations page.
Create a Kubernetes secret on your cluster named logging-secret in the kube-system namespace with the following fields:
- PAPERTRAIL_PROTOCOL – Acceptable values are udp, tcp, tls and should match the selections made in the Accept connections via portion of the newly created log destination’s Destination Settings page; by default, a new destination accepts TLS and UDP connections.
- PAPERTRAIL_HOST – Log destination host; should match the newly created log destination host at the top of the newly created log destination’s Destination Settings page.
- PAPERTRAIL_PORT – Log destination port; should match the log destination port at the top of the newly created log destination’s Destination Settings page.
- LOGGLY_TOKEN – if you do not use Loggly or are simply not using rKubelog with Loggly, leave the value empty to disable Loggly. Else, enter your customer token from Loggly.
Preview the deployment using kubectl apply -k . --dry-run -o yaml
If all looks good, apply the deployment using kubectl apply -k .

Troubleshooting

Logs do not appear in Papertrail after deploying rKubelog

If you deploy rKubelog on nodeless clusters, such as EKS on Fargate, you may not see logs in Papertrail immediately. For EKS on Fargate, it may take up to two minutes for a pod to be fully deployed, as AWS needs to provision Fargate nodes. You can check the progress using:

kubectl get pods -o wide -n kube-system | grep rkubelog

The “status” should be “Running”
The “node” column should have a proper value (fargate-ip-192-168-X-X.us-east-2.compute.internal)
The “nominated node” column should be empty

Logs suddenly stopped flowing

If logs suddenly stop flowing, restart the rKubelog deployment:

kubectl scale deployment rkubelog --replicas=0 -n kube-system
kubectl scale deployment rkubelog --replicas=1 -n kube-system

Still having trouble

If you are still having trouble viewing your logs or are unsure how to proceed, we’re happy to help. Contact us.