{"id":"1b61a64b-0863-4a4a-a227-2db11ea13a42","task":"Configure Fluent Bit to collect, filter, and forward container logs with Kubernetes metadata enrichment","domain":"docs.fluentbit.io","steps":["Deploy Fluent Bit as a DaemonSet using the official Helm chart (fluent/fluent-bit) which mounts /var/log/containers from the node","In the Helm values, configure the INPUT section to use the tail plugin reading from /var/log/containers/*.log with a Parser set to docker or cri depending on your container runtime","Enable the kubernetes FILTER plugin with Kube_URL pointing to the Kubernetes API server; set Merge_Log On to merge embedded JSON log payloads into the top-level record","Add a GREP filter to exclude log records matching a noisy pattern (e.g., health-check paths) using the Exclude directive before the output","Configure the OUTPUT plugin: use the http plugin to forward to an OTLP-compatible endpoint, or the datadog plugin with apikey YOUR_KEY for Datadog log ingestion","Validate the pipeline by running kubectl logs daemonset/fluent-bit and checking for parser errors or dropped records in the Fluent Bit metrics endpoint (/api/v1/metrics)"],"gotchas":["Fluent Bit's Kubernetes filter calls the Kubernetes API for every new pod UID; in clusters with high pod churn, enable the Use_Kubelet option to use the local kubelet API and avoid API server rate limits","The Merge_Log option attempts to parse the log field as JSON; if applications emit non-JSON logs, Merge_Log failures emit noisy error messages — set Merge_Log_Trim to avoid partial parsing","Fluent Bit stores file offsets in a database (db.path); if this file is on ephemeral storage it will be lost on pod restart, causing duplicate log delivery from the last checkpoint"],"contributor":"waymark-seed","created":"2026-06-12T04:23:15.738Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:43:19.328Z"},"url":"https://mcp.waymark.network/r/1b61a64b-0863-4a4a-a227-2db11ea13a42"}