Skip to content

Enable k8s metadata for fluentbit application logs - #261

Merged
JayPolanco merged 1 commit into
aws-observability:mainfrom
KlwntSingh:enable_k8s_in_fluentbit
Jan 6, 2026
Merged

JayPolanco merged 1 commit into
aws-observability:mainfrom
KlwntSingh:enable_k8s_in_fluentbit

Conversation

@KlwntSingh

@KlwntSingh KlwntSingh commented Dec 19, 2025 •

Copy link
Copy Markdown
Contributor

Issue #, if available:
Currently, workload application logs collected by fluentbit on Windows doesn't include k8s metadata. The logs looks like

{
    "log": "2025-12-18T20:37:42.4954622Z stdout F Reply from ::1: time<1ms "
}

This change add k8s metadata logs to application logs, similar to application logs on Linux.

{
    "log": "2025-12-19T03:08:02.5138241Z stdout F Reply from ::1: time<1ms ",
    "kubernetes": {
        "pod_name": "windows-server-iis-ltsc2022-1-99b69f97c-2hblx",
        "namespace_name": "default",
        "pod_id": "a5b75d0c-0373-4c9e-a23e-bd03990efb86",
        "host": "ip-192-168-5-35.us-west-2.compute.internal",
        "container_name": "windows-server-iis-ltsc2022-1",
        "docker_id": "ca60d4c0d33f8730b92614bbcd84652e70459247808ad4f563d72e95318777be",
        "container_hash": "mcr.microsoft.com/windows/servercore/iis@sha256:03c5cbdb04a92e1316409a3e5df5963dac8a2b20fa37cede95bb2b2a1014e751",
        "container_image": "mcr.microsoft.com/windows/servercore/iis:windowsservercore-ltsc2022"
    }
}

Description of changes:

Adds a new k8s filter to fluentbit configuration for Windows only

Tested
Ran a manual test and the change on cluster succeeds.
Screenshot 2025-12-18 at 9 18 53β€―PM

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@JayPolanco
JayPolanco merged commit 2f82717 into aws-observability:main Jan 6, 2026
14 of 17 checks passed
@movence movence mentioned this pull request Jan 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants