Logs record events from system services and application workloads. In Kubernetes operations, they help administrators investigate cluster activity and workload errors; access logging also supports security and observability in Anthos Service Mesh. section 5.1.4 section 4.5.4
Kubernetes logs differ by source and retrieval path:
- System logs come from services such as kube-apiserver, etcd, kube-scheduler, and kube-controller-manager; application logs contain details from cluster workloads. section 5.1.4
- Logs can be retrieved on demand from the Kubernetes API through the Connect Agent, which issues a kubectl logs command. This retrieval increases latency and can be useful for security requests. section 5.1.4
- Pod output is written to the node. When the Google Cloud operations suite agent is enabled, logs are aggregated and forwarded to the Cloud Logging API. Metrics, by contrast, record observations such as memory use or requests per second. section 5.1.4
Migrated application logs
Migrate for Anthos can send workload-container logs to Cloud Logging. By default, it considers output written to stdout by init and the contents of /var/log/syslog. section 15.5
