Ensure that OpenShift Logging Operator is scanning the cluster
An XCCDF Rule
Description
OpenShift Logging Operator provides ability to aggregate all the logs from the OpenShift Container Platform cluster, such as node system audit logs, application container logs, and infrastructure logs. OpenShift Logging aggregates these logs from throughout OpenShift cluster and stores them in a default log store. [1] [1]https://docs.openshift.com/container-platform/4.10/logging/cluster-logging.html
warning alert: Warning
This rule's check operates on the cluster configuration dump.
Therefore, you need to use a tool that can query the OCP API, retrieve the
/apis/logging.openshift.io/v1/namespaces/openshift-logging/clusterloggings/instance
API endpoint to the local /apis/logging.openshift.io/v1/namespaces/openshift-logging/clusterloggings/instance
file. Rationale
OpenShift Logging Operator is able to collect, aggregate, and manage logs.
- ID
- xccdf_org.ssgproject.content_rule_cluster_logging_operator_exist
- Severity
- Medium
- References
- Updated