mirror of
https://github.com/kubesphere/website.git
synced 2025-12-26 00:12:48 +00:00
Update auditing log guide
Signed-off-by: Sherlock113 <sherlockxu@yunify.com>
This commit is contained in:
parent
66838f38a7
commit
f5c243306c
|
|
@ -41,14 +41,14 @@ By default, KubeKey will install Elasticsearch internally if Auditing is enabled
|
|||
|
||||
```yaml
|
||||
es: # Storage backend for logging, tracing, events and auditing.
|
||||
elasticsearchMasterReplicas: 1 # total number of master nodes, it's not allowed to use even number
|
||||
elasticsearchDataReplicas: 1 # total number of data nodes
|
||||
elasticsearchMasterVolumeSize: 4Gi # Volume size of Elasticsearch master nodes
|
||||
elasticsearchDataVolumeSize: 20Gi # Volume size of Elasticsearch data nodes
|
||||
logMaxAge: 7 # Log retention time in built-in Elasticsearch, it is 7 days by default.
|
||||
elkPrefix: logstash # The string making up index names. The index name will be formatted as ks-<elk_prefix>-log
|
||||
externalElasticsearchUrl: # The URL of external Elasticsearch
|
||||
externalElasticsearchPort: # The port of external Elasticsearch
|
||||
elasticsearchMasterReplicas: 1 # The total number of master nodes. Even numbers are not allowed.
|
||||
elasticsearchDataReplicas: 1 # The total number of data nodes.
|
||||
elasticsearchMasterVolumeSize: 4Gi # The volume size of Elasticsearch master nodes.
|
||||
elasticsearchDataVolumeSize: 20Gi # The volume size of Elasticsearch data nodes.
|
||||
logMaxAge: 7 # Log retention day in built-in Elasticsearch. It is 7 days by default.
|
||||
elkPrefix: logstash # The string making up index names. The index name will be formatted as ks-<elk_prefix>-log.
|
||||
externalElasticsearchUrl: # The URL of external Elasticsearch.
|
||||
externalElasticsearchPort: # The port of external Elasticsearch.
|
||||
```
|
||||
|
||||
3. Create a cluster using the configuration file:
|
||||
|
|
@ -80,14 +80,14 @@ By default, ks-installer will install Elasticsearch internally if Auditing is en
|
|||
|
||||
```yaml
|
||||
es: # Storage backend for logging, tracing, events and auditing.
|
||||
elasticsearchMasterReplicas: 1 # total number of master nodes, it's not allowed to use even number
|
||||
elasticsearchDataReplicas: 1 # total number of data nodes
|
||||
elasticsearchMasterVolumeSize: 4Gi # Volume size of Elasticsearch master nodes
|
||||
elasticsearchDataVolumeSize: 20Gi # Volume size of Elasticsearch data nodes
|
||||
logMaxAge: 7 # Log retention time in built-in Elasticsearch, it is 7 days by default.
|
||||
elkPrefix: logstash # The string making up index names. The index name will be formatted as ks-<elk_prefix>-log
|
||||
externalElasticsearchUrl: # The URL of external Elasticsearch
|
||||
externalElasticsearchPort: # The port of external Elasticsearch
|
||||
elasticsearchMasterReplicas: 1 # The total number of master nodes. Even numbers are not allowed.
|
||||
elasticsearchDataReplicas: 1 # The total number of data nodes.
|
||||
elasticsearchMasterVolumeSize: 4Gi # The volume size of Elasticsearch master nodes.
|
||||
elasticsearchDataVolumeSize: 20Gi # The volume size of Elasticsearch data nodes.
|
||||
logMaxAge: 7 # Log retention day in built-in Elasticsearch. It is 7 days by default.
|
||||
elkPrefix: logstash # The string making up index names. The index name will be formatted as ks-<elk_prefix>-log.
|
||||
externalElasticsearchUrl: # The URL of external Elasticsearch.
|
||||
externalElasticsearchPort: # The port of external Elasticsearch.
|
||||
```
|
||||
|
||||
3. Execute the following commands to start installation:
|
||||
|
|
@ -127,14 +127,14 @@ By default, Elasticsearch will be installed internally if Auditing is enabled. F
|
|||
|
||||
```yaml
|
||||
es: # Storage backend for logging, tracing, events and auditing.
|
||||
elasticsearchMasterReplicas: 1 # total number of master nodes, it's not allowed to use even number
|
||||
elasticsearchDataReplicas: 1 # total number of data nodes
|
||||
elasticsearchMasterVolumeSize: 4Gi # Volume size of Elasticsearch master nodes
|
||||
elasticsearchDataVolumeSize: 20Gi # Volume size of Elasticsearch data nodes
|
||||
logMaxAge: 7 # Log retention time in built-in Elasticsearch, it is 7 days by default.
|
||||
elkPrefix: logstash # The string making up index names. The index name will be formatted as ks-<elk_prefix>-log
|
||||
externalElasticsearchUrl: # The URL of external Elasticsearch
|
||||
externalElasticsearchPort: # The port of external Elasticsearch
|
||||
elasticsearchMasterReplicas: 1 # The total number of master nodes. Even numbers are not allowed.
|
||||
elasticsearchDataReplicas: 1 # The total number of data nodes.
|
||||
elasticsearchMasterVolumeSize: 4Gi # The volume size of Elasticsearch master nodes.
|
||||
elasticsearchDataVolumeSize: 20Gi # The volume size of Elasticsearch data nodes.
|
||||
logMaxAge: 7 # Log retention day in built-in Elasticsearch. It is 7 days by default.
|
||||
elkPrefix: logstash # The string making up index names. The index name will be formatted as ks-<elk_prefix>-log.
|
||||
externalElasticsearchUrl: # The URL of external Elasticsearch.
|
||||
externalElasticsearchPort: # The port of external Elasticsearch.
|
||||
```
|
||||
|
||||
5. You can use the web kubectl to check the installation process by executing the following command:
|
||||
|
|
@ -153,11 +153,9 @@ You can find the web kubectl tool by clicking the hammer icon in the bottom-righ
|
|||
|
||||
{{< tab "Verify the component on the dashboard" >}}
|
||||
|
||||
If you enable both Logging and Auditing, you can check the status of Auditing in **Logging** in **Components**. You may see an image as follows:
|
||||
Verify that you can use the **Auditing Operating** function from the **Toolbox** in the bottom right corner.
|
||||
|
||||

|
||||
|
||||
If you only enable Auditing without Logging installed, you cannot see the image above as the button **Logging** will not display.
|
||||

|
||||
|
||||
{{</ tab >}}
|
||||
|
||||
|
|
|
|||
|
|
@ -41,14 +41,14 @@ KubeSphere 审计日志系统提供了一套与安全相关并按时间顺序排
|
|||
|
||||
```yaml
|
||||
es: # Storage backend for logging, tracing, events and auditing.
|
||||
elasticsearchMasterReplicas: 1 # total number of master nodes, it's not allowed to use even number
|
||||
elasticsearchDataReplicas: 1 # total number of data nodes
|
||||
elasticsearchMasterVolumeSize: 4Gi # Volume size of Elasticsearch master nodes
|
||||
elasticsearchDataVolumeSize: 20Gi # Volume size of Elasticsearch data nodes
|
||||
logMaxAge: 7 # Log retention time in built-in Elasticsearch, it is 7 days by default.
|
||||
elkPrefix: logstash # The string making up index names. The index name will be formatted as ks-<elk_prefix>-log
|
||||
externalElasticsearchUrl: # The URL of external Elasticsearch
|
||||
externalElasticsearchPort: # The port of external Elasticsearch
|
||||
elasticsearchMasterReplicas: 1 # The total number of master nodes. Even numbers are not allowed.
|
||||
elasticsearchDataReplicas: 1 # The total number of data nodes.
|
||||
elasticsearchMasterVolumeSize: 4Gi # The volume size of Elasticsearch master nodes.
|
||||
elasticsearchDataVolumeSize: 20Gi # The volume size of Elasticsearch data nodes.
|
||||
logMaxAge: 7 # Log retention day in built-in Elasticsearch. It is 7 days by default.
|
||||
elkPrefix: logstash # The string making up index names. The index name will be formatted as ks-<elk_prefix>-log.
|
||||
externalElasticsearchUrl: # The URL of external Elasticsearch.
|
||||
externalElasticsearchPort: # The port of external Elasticsearch.
|
||||
```
|
||||
|
||||
3. 使用该配置文件创建集群:
|
||||
|
|
@ -80,14 +80,14 @@ KubeSphere 审计日志系统提供了一套与安全相关并按时间顺序排
|
|||
|
||||
```yaml
|
||||
es: # Storage backend for logging, tracing, events and auditing.
|
||||
elasticsearchMasterReplicas: 1 # total number of master nodes, it's not allowed to use even number
|
||||
elasticsearchDataReplicas: 1 # total number of data nodes
|
||||
elasticsearchMasterVolumeSize: 4Gi # Volume size of Elasticsearch master nodes
|
||||
elasticsearchDataVolumeSize: 20Gi # Volume size of Elasticsearch data nodes
|
||||
logMaxAge: 7 # Log retention time in built-in Elasticsearch, it is 7 days by default.
|
||||
elkPrefix: logstash # The string making up index names. The index name will be formatted as ks-<elk_prefix>-log
|
||||
externalElasticsearchUrl: # The URL of external Elasticsearch
|
||||
externalElasticsearchPort: # The port of external Elasticsearch
|
||||
elasticsearchMasterReplicas: 1 # The total number of master nodes. Even numbers are not allowed.
|
||||
elasticsearchDataReplicas: 1 # The total number of data nodes.
|
||||
elasticsearchMasterVolumeSize: 4Gi # The volume size of Elasticsearch master nodes.
|
||||
elasticsearchDataVolumeSize: 20Gi # The volume size of Elasticsearch data nodes.
|
||||
logMaxAge: 7 # Log retention day in built-in Elasticsearch. It is 7 days by default.
|
||||
elkPrefix: logstash # The string making up index names. The index name will be formatted as ks-<elk_prefix>-log.
|
||||
externalElasticsearchUrl: # The URL of external Elasticsearch.
|
||||
externalElasticsearchPort: # The port of external Elasticsearch.
|
||||
```
|
||||
|
||||
3. 执行以下命令开始安装:
|
||||
|
|
@ -127,14 +127,14 @@ KubeSphere 审计日志系统提供了一套与安全相关并按时间顺序排
|
|||
|
||||
```yaml
|
||||
es: # Storage backend for logging, tracing, events and auditing.
|
||||
elasticsearchMasterReplicas: 1 # total number of master nodes, it's not allowed to use even number
|
||||
elasticsearchDataReplicas: 1 # total number of data nodes
|
||||
elasticsearchMasterVolumeSize: 4Gi # Volume size of Elasticsearch master nodes
|
||||
elasticsearchDataVolumeSize: 20Gi # Volume size of Elasticsearch data nodes
|
||||
logMaxAge: 7 # Log retention time in built-in Elasticsearch, it is 7 days by default.
|
||||
elkPrefix: logstash # The string making up index names. The index name will be formatted as ks-<elk_prefix>-log
|
||||
externalElasticsearchUrl: # The URL of external Elasticsearch
|
||||
externalElasticsearchPort: # The port of external Elasticsearch
|
||||
elasticsearchMasterReplicas: 1 # The total number of master nodes. Even numbers are not allowed.
|
||||
elasticsearchDataReplicas: 1 # The total number of data nodes.
|
||||
elasticsearchMasterVolumeSize: 4Gi # The volume size of Elasticsearch master nodes.
|
||||
elasticsearchDataVolumeSize: 20Gi # The volume size of Elasticsearch data nodes.
|
||||
logMaxAge: 7 # Log retention day in built-in Elasticsearch. It is 7 days by default.
|
||||
elkPrefix: logstash # The string making up index names. The index name will be formatted as ks-<elk_prefix>-log.
|
||||
externalElasticsearchUrl: # The URL of external Elasticsearch.
|
||||
externalElasticsearchPort: # The port of external Elasticsearch.
|
||||
```
|
||||
|
||||
5. 可以执行以下命令,使用 Web Kubectl 工具来检查安装过程:
|
||||
|
|
@ -153,11 +153,9 @@ KubeSphere 审计日志系统提供了一套与安全相关并按时间顺序排
|
|||
|
||||
{{< tab "在仪表板中验证组件的安装" >}}
|
||||
|
||||
如果同时启用了日志系统和审计功能,您可以在**服务组件**的 **Logging** 中查看审计状态。您可以看到如下图所示界面:
|
||||
验证您可以使用右下角**工具箱**中的**操作审计**功能。
|
||||
|
||||

|
||||
|
||||
如果只启用审计功能而不安装日志系统,则无法看到上图所示界面,因为不会显示 **Logging** 按钮。
|
||||

|
||||
|
||||
{{</ tab >}}
|
||||
|
||||
|
|
|
|||
Binary file not shown.
|
After Width: | Height: | Size: 118 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 130 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 113 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 141 KiB |
Loading…
Reference in New Issue