<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>article Troubleshooting logs ingested via Fluent Bit in Troubleshooting</title>
    <link>https://community.dynatrace.com/t5/Troubleshooting/Troubleshooting-logs-ingested-via-Fluent-Bit/ta-p/283718</link>
    <description>&lt;P&gt;&lt;LI-TOC indent="15" liststyle="disc" maxheadinglevel="2"&gt;&lt;/LI-TOC&gt;&lt;/P&gt;
&lt;DIV class="lia-message-template-content-zone"&gt;
&lt;H1&gt;&amp;nbsp;&lt;/H1&gt;
&lt;H1&gt;Summary&lt;/H1&gt;
&lt;P&gt;&lt;SPAN&gt;This troubleshooting article will help resolve some common issues faced while ingesting logs into &lt;A href="https://docs.dynatrace.com/docs/analyze-explore-automate/logs/lma-log-ingestion/lma-stream-logs-with-fluent-bit" target="_self"&gt;Dynatrace via Fluent Bit.&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;H1&gt;&amp;nbsp;&lt;/H1&gt;
&lt;H1&gt;Troubleshooting steps&lt;/H1&gt;
&lt;OL&gt;
&lt;LI&gt;Make sure the token is a&amp;nbsp;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;A class="_z2r50s3-1-8-0 _1iksxp40-1-8-0 sc-3cdd2013-1 ivMpWt" title="Find out how to get authenticated to use the Dynatrace API." href="https://docs.dynatrace.com/docs/discover-dynatrace/references/dynatrace-api/basics/dynatrace-api-authentication" target="_blank" rel="noopener"&gt;Dynatrace API token&lt;/A&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;with the&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;CODE class="_1v51izp0-1-8-0"&gt;logs.ingest&lt;/CODE&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;(Ingest Logs) scope.&lt;/LI&gt;
&lt;LI&gt;Make sure&amp;nbsp;&amp;nbsp;&lt;A class="_z2r50s3-1-8-0 _1v1skpy0-1-8-0 sc-3cdd2013-0 eccFTo" href="https://dt-url.net/zd034je" target="_blank" rel="noopener"&gt;Deploy Fluent Bit&lt;/A&gt;&amp;nbsp;is deployed successfully.&lt;/LI&gt;
&lt;LI&gt;Once deployed, ensure the Fluent Bit pod is running. This can be checked by running the command&amp;nbsp;&lt;LI-CODE lang="python"&gt;kubectl get pods -n &amp;lt;namespace&amp;gt; ​&lt;/LI-CODE&gt;&lt;/LI&gt;
&lt;LI&gt;&amp;nbsp;Ensure the HTTP output plugin, which sends logs to the Dynatrace generic logs ingest endpoint through the configuration file, is configured correctly.
&lt;OL&gt;
&lt;LI&gt;Edit the configmap by running the command below and adding the contents below to it.&lt;BR /&gt;&lt;LI-CODE lang="python"&gt;kubectl edit configmap fluent-bit -n &amp;lt;namespace&amp;gt; ​&lt;/LI-CODE&gt;&lt;LI-CODE lang="python"&gt;[OUTPUT]
    name  http
    match *
    header Content-Type application/json; charset=utf-8
    header Authorization Api-Token {your-API-token-here}
    allow_duplicated_headers false
    host  {your-environment-id}.live.dynatrace.com
    Port  443
    URI   /api/v2/logs/ingest
    Format json
    json_date_format iso8601
    json_date_key timestamp
    tls On
    tls.verify On​&lt;/LI-CODE&gt;&lt;/LI&gt;
&lt;LI&gt;Run the command below to check if the logs are sent successfully to Dynatrace.&lt;LI-CODE lang="python"&gt;kubectl logs &amp;lt;fluent-bit pod-name&amp;gt;  -n &amp;lt;namespace&amp;gt; | grep  {your-environment-id}  &lt;/LI-CODE&gt;You'll get similar logs like this repeating.&lt;BR /&gt;&lt;LI-CODE lang="python"&gt;[timestamp][ info] [output:http:http.2] {your-environment-id}:443, HTTP status=204​&lt;/LI-CODE&gt;&lt;/LI&gt;
&lt;/OL&gt;
&lt;/LI&gt;
&lt;/OL&gt;
&lt;P class="lia-indent-padding-left-90px lia-align-justify"&gt;An HTTP status of 204 means the request was accepted. &lt;BR /&gt;Other possible responses include '401 Unauthorized' if you used a bad token, or any of the responses listed &lt;A href="https://docs.dynatrace.com/docs/shortlink/api-log-monitoring-v2-post-ingest#response" target="_self"&gt;here.&lt;/A&gt;&lt;/P&gt;
&lt;H1&gt;&lt;BR /&gt;What's next&lt;/H1&gt;
&lt;P&gt;&lt;SPAN&gt;If none of the steps in this article resolved the issue, open a chat&amp;nbsp;or support ticket and&lt;/SPAN&gt;&amp;nbsp;provide the following details:&amp;nbsp;&amp;nbsp;&lt;/P&gt;
&lt;UL&gt;
&lt;LI&gt;Sample logs created by the pods.&lt;/LI&gt;
&lt;LI&gt;Output of the following commands:&lt;BR /&gt;&lt;LI-CODE lang="markup"&gt;kubectl logs &amp;lt;fluent-bit pod-name&amp;gt; -n &amp;lt;namespace&amp;gt; &amp;gt; pod-logs.txt
kubectl describe pod &amp;lt;fluent-bit pod-name&amp;gt; -n &amp;lt;namespace&amp;gt; &amp;gt; pod-describe.txt
kubectl get configmap &amp;lt;fluent-bit configmap-name&amp;gt; -n &amp;lt;namespace&amp;gt; -o yaml &amp;gt; configmap.yaml​&lt;/LI-CODE&gt;&lt;/LI&gt;
&lt;/UL&gt;
&lt;/DIV&gt;</description>
    <pubDate>Tue, 19 Aug 2025 11:00:20 GMT</pubDate>
    <dc:creator>noel_david</dc:creator>
    <dc:date>2025-08-19T11:00:20Z</dc:date>
    <item>
      <title>Troubleshooting logs ingested via Fluent Bit</title>
      <link>https://community.dynatrace.com/t5/Troubleshooting/Troubleshooting-logs-ingested-via-Fluent-Bit/ta-p/283718</link>
      <description>&lt;P&gt;&lt;LI-TOC indent="15" liststyle="disc" maxheadinglevel="2"&gt;&lt;/LI-TOC&gt;&lt;/P&gt;
&lt;DIV class="lia-message-template-content-zone"&gt;
&lt;H1&gt;&amp;nbsp;&lt;/H1&gt;
&lt;H1&gt;Summary&lt;/H1&gt;
&lt;P&gt;&lt;SPAN&gt;This troubleshooting article will help resolve some common issues faced while ingesting logs into &lt;A href="https://docs.dynatrace.com/docs/analyze-explore-automate/logs/lma-log-ingestion/lma-stream-logs-with-fluent-bit" target="_self"&gt;Dynatrace via Fluent Bit.&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;H1&gt;&amp;nbsp;&lt;/H1&gt;
&lt;H1&gt;Troubleshooting steps&lt;/H1&gt;
&lt;OL&gt;
&lt;LI&gt;Make sure the token is a&amp;nbsp;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;A class="_z2r50s3-1-8-0 _1iksxp40-1-8-0 sc-3cdd2013-1 ivMpWt" title="Find out how to get authenticated to use the Dynatrace API." href="https://docs.dynatrace.com/docs/discover-dynatrace/references/dynatrace-api/basics/dynatrace-api-authentication" target="_blank" rel="noopener"&gt;Dynatrace API token&lt;/A&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;with the&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;CODE class="_1v51izp0-1-8-0"&gt;logs.ingest&lt;/CODE&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;(Ingest Logs) scope.&lt;/LI&gt;
&lt;LI&gt;Make sure&amp;nbsp;&amp;nbsp;&lt;A class="_z2r50s3-1-8-0 _1v1skpy0-1-8-0 sc-3cdd2013-0 eccFTo" href="https://dt-url.net/zd034je" target="_blank" rel="noopener"&gt;Deploy Fluent Bit&lt;/A&gt;&amp;nbsp;is deployed successfully.&lt;/LI&gt;
&lt;LI&gt;Once deployed, ensure the Fluent Bit pod is running. This can be checked by running the command&amp;nbsp;&lt;LI-CODE lang="python"&gt;kubectl get pods -n &amp;lt;namespace&amp;gt; ​&lt;/LI-CODE&gt;&lt;/LI&gt;
&lt;LI&gt;&amp;nbsp;Ensure the HTTP output plugin, which sends logs to the Dynatrace generic logs ingest endpoint through the configuration file, is configured correctly.
&lt;OL&gt;
&lt;LI&gt;Edit the configmap by running the command below and adding the contents below to it.&lt;BR /&gt;&lt;LI-CODE lang="python"&gt;kubectl edit configmap fluent-bit -n &amp;lt;namespace&amp;gt; ​&lt;/LI-CODE&gt;&lt;LI-CODE lang="python"&gt;[OUTPUT]
    name  http
    match *
    header Content-Type application/json; charset=utf-8
    header Authorization Api-Token {your-API-token-here}
    allow_duplicated_headers false
    host  {your-environment-id}.live.dynatrace.com
    Port  443
    URI   /api/v2/logs/ingest
    Format json
    json_date_format iso8601
    json_date_key timestamp
    tls On
    tls.verify On​&lt;/LI-CODE&gt;&lt;/LI&gt;
&lt;LI&gt;Run the command below to check if the logs are sent successfully to Dynatrace.&lt;LI-CODE lang="python"&gt;kubectl logs &amp;lt;fluent-bit pod-name&amp;gt;  -n &amp;lt;namespace&amp;gt; | grep  {your-environment-id}  &lt;/LI-CODE&gt;You'll get similar logs like this repeating.&lt;BR /&gt;&lt;LI-CODE lang="python"&gt;[timestamp][ info] [output:http:http.2] {your-environment-id}:443, HTTP status=204​&lt;/LI-CODE&gt;&lt;/LI&gt;
&lt;/OL&gt;
&lt;/LI&gt;
&lt;/OL&gt;
&lt;P class="lia-indent-padding-left-90px lia-align-justify"&gt;An HTTP status of 204 means the request was accepted. &lt;BR /&gt;Other possible responses include '401 Unauthorized' if you used a bad token, or any of the responses listed &lt;A href="https://docs.dynatrace.com/docs/shortlink/api-log-monitoring-v2-post-ingest#response" target="_self"&gt;here.&lt;/A&gt;&lt;/P&gt;
&lt;H1&gt;&lt;BR /&gt;What's next&lt;/H1&gt;
&lt;P&gt;&lt;SPAN&gt;If none of the steps in this article resolved the issue, open a chat&amp;nbsp;or support ticket and&lt;/SPAN&gt;&amp;nbsp;provide the following details:&amp;nbsp;&amp;nbsp;&lt;/P&gt;
&lt;UL&gt;
&lt;LI&gt;Sample logs created by the pods.&lt;/LI&gt;
&lt;LI&gt;Output of the following commands:&lt;BR /&gt;&lt;LI-CODE lang="markup"&gt;kubectl logs &amp;lt;fluent-bit pod-name&amp;gt; -n &amp;lt;namespace&amp;gt; &amp;gt; pod-logs.txt
kubectl describe pod &amp;lt;fluent-bit pod-name&amp;gt; -n &amp;lt;namespace&amp;gt; &amp;gt; pod-describe.txt
kubectl get configmap &amp;lt;fluent-bit configmap-name&amp;gt; -n &amp;lt;namespace&amp;gt; -o yaml &amp;gt; configmap.yaml​&lt;/LI-CODE&gt;&lt;/LI&gt;
&lt;/UL&gt;
&lt;/DIV&gt;</description>
      <pubDate>Tue, 19 Aug 2025 11:00:20 GMT</pubDate>
      <guid>https://community.dynatrace.com/t5/Troubleshooting/Troubleshooting-logs-ingested-via-Fluent-Bit/ta-p/283718</guid>
      <dc:creator>noel_david</dc:creator>
      <dc:date>2025-08-19T11:00:20Z</dc:date>
    </item>
  </channel>
</rss>

