Control: 7.1.7 Ensure IBM Cloud Kubernetes Service clusters have the logging service enabled
Description
Create a logging configuration to forward cluster and app logs to IBM Log Analysis with LogDNA. IBM Log Analysis with LogDNA offers administrators, DevOps teams, and developers advanced features to filter, search, and tail log data, define alerts, and design custom views to monitor application and system logs.
Remediation
From Console:
- Log in to IBM Cloud at https://cloud.ibm.com.
- Click Menu icon --> Resource list
- Select your cluster under Clusters to go to the details page.
- Select the Overview tab
- Under Logging, click Connect.
- Select the region and the IBM Log Analysis with LogDNA service instance that you want to use, and click Connect.
From Command Line:
- Install the IBM Cloud Kubernetes Service observability plug-in.
ibmcloud plugin install observe-service
- Create the LogDNA logging configuration.
ibmcloud ob logging config create --cluster <cluster_name_or_ID> --instance<LogDNA_instance_name_or_ID>
Usage
Run the control in your terminal:
powerpipe control run ibm_compliance.control.cis_v100_7_1_7Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run ibm_compliance.control.cis_v100_7_1_7 --shareSQL
This control uses a named query:
manual_control