# Logging with Custom log-scheme (GELF) -solved

**URL:** <https://forums.suse.com/t/logging-with-custom-log-scheme-gelf-solved/10651>\
**Category:** SUSE Rancher Prime\
**Created:** [June 4, 2018, 9:07am UTC](https://forums.suse.com/t/logging-with-custom-log-scheme-gelf-solved/10651 "2018-06-04T09:07:28Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![delck](https://avatars.discourse-cdn.com/v4/letter/d/e56c9b/32.png) [@delck](https://forums.suse.com/u/delck)\
**Post date:** [June 4, 2018, 9:07am UTC](https://forums.suse.com/t/logging-with-custom-log-scheme-gelf-solved/10651/1 "2018-06-04T09:07:28Z")

</div>

Hi,

I want to send the log-messages to the logging-service of a private cloud.

For this we have following requirements

- Logs in a GELF-Scheme

- Logstash-schema

- Customized Header, where we can insert authentication

I wasn’t able to modify on of the Logging possibles to fit my requirements. Is there a way?

How is the best way to install Logstash on our Nodes, when it is not possible to customized the logs cached from Rancher?

Best regards  
delck

---

<div class="post-metadata">

**Author:** ![Guido\_Steiner](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/guido_steiner/32/5862_2.png) [@Guido\_Steiner](https://forums.suse.com/u/Guido_Steiner)\
**Post date:** [June 4, 2018, 10:22am UTC](https://forums.suse.com/t/logging-with-custom-log-scheme-gelf-solved/10651/2 "2018-06-04T10:22:36Z")

</div>

> **[GitHub - roffe/kube-gelf: CoreOS Kubernetes logging to Graylog](https://github.com/roffe/kube-gelf)**
>
> CoreOS Kubernetes logging to Graylog. Contribute to roffe/kube-gelf development by creating an account on GitHub.

but there is currently a issue with a workaround in the comments: see here. [Kubelet is not creating the log symlink · Issue #52172 · kubernetes/kubernetes · GitHub](https://github.com/kubernetes/kubernetes/issues/52172#issuecomment-346075080) .

---

<div class="post-metadata">

**Author:** ![delck](https://avatars.discourse-cdn.com/v4/letter/d/e56c9b/32.png) [@delck](https://forums.suse.com/u/delck)\
**Post date:** [June 5, 2018, 7:18am UTC](https://forums.suse.com/t/logging-with-custom-log-scheme-gelf-solved/10651/3 "2018-06-05T07:18:48Z")

</div>

Thank you, the deamonset was the solution to my problem.