Logs that record activities, exceptions, faults and other relevant events shall be produced, stored, protected and analyzed
KubeAid provides a unified logging stack using Fluent Bit, Graylog and Loki, ensuring all application, cluster, and infrastructure logs are aggregated and searchable in one place.
The logging stack provided via kubeaid has Kubernetes API audit logs, Keycloak authentication logs, Netbird VPN logs,argocd logs and admin activity logs — supporting compliance, and incident investigations.
Logs are sent to write-once storage to prevent modification or deletion. Access is strictly controlled with RBAC and IAM to ensure only authorized personnel can view or export logs.
Log-based alerts detect anomalies such as failed logins, service crashes. Alerts flow through Prometheus Alertmanager into mattermost channel where we get notified about the alerts/incidents via our in-house alert processor and dispatcher tool opsmondo..