Skip to content

Commit d6a7e88

Browse files
dkirov-ddclaude
andauthored
Add support for vault-enterprise container image in log pipeline (DataDog#22565)
* Add support for vault-enterprise container image in log pipeline Update the Vault log pipeline filter to accept logs from both vault and vault-enterprise container images. This enables automatic log processing for Vault Enterprise deployments in Kubernetes where the sidecar container image name differs from the standard Vault image. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> * Add vault-enterprise to installation-sources * Fix query format --------- Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
1 parent ebcbac9 commit d6a7e88

1 file changed

Lines changed: 6 additions & 3 deletions

File tree

vault/assets/logs/vault.yaml

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,9 @@
22
id: vault
33
metric_id: vault
44
backend_only: false
5+
installation_sources:
6+
- vault
7+
- vault-enterprise
58
facets:
69
- groups:
710
- Web Access
@@ -128,16 +131,16 @@ pipeline:
128131
name: Vault
129132
enabled: true
130133
filter:
131-
query: source:vault
134+
query: source:(vault OR vault-enterprise)
132135
processors:
133136
- type: grok-parser
134137
name: Parsing Vault Server logs
135138
enabled: true
136139
source: message
137140
samples:
138141
- 2019-11-04T17:48:44.226-0800 [WARN] no `api_addr` value specified in config or in VAULT_API_ADDR; falling back to detection if possible, but this value should be manually set
139-
- '2019-11-04T17:48:58.967-0800 [DEBUG] core: starting cluster listeners'
140-
- '2019-11-04T17:48:58.967-0800 [INFO] core.cluster-listener: starting listener: listener_address=0.0.0.0:8201'
142+
- "2019-11-04T17:48:58.967-0800 [DEBUG] core: starting cluster listeners"
143+
- "2019-11-04T17:48:58.967-0800 [INFO] core.cluster-listener: starting listener: listener_address=0.0.0.0:8201"
141144
grok:
142145
supportRules: |
143146
_date %{date("yyyy-MM-dd'T'HH:mm:ss.SSSZ"):timestamp}

0 commit comments

Comments
 (0)