I am new to kubernetes and centralized logging. I have installed EFK on my cluster from kubernetes repository and I deleted the flowing code from fluentd-es-ds.yaml file:

nodeSelector:
  beta.kubernetes.io/fluentd-ds-ready: "true"

I installed counter pod that logs at sout but I can't find the logs in kibana. Why did fluend didn't find the logs? Where does kubernetes store the logs?

I must mention that I have my cluster running on centos machines.

EDIT

I have figured out what the problem is. I have systemd on the machines and my logs are written in journald. I found out that all the logs are in "/run/log/journal" on master node. Do you know how I can change this so that logs can be found on every machine where the pods are running? Or if you know a way to get logs from journald using fluentd?

Thanks