I have set up EFK on Kubernetes, currently I have access only to logs from logstash but wondering how can I install some plugins for Fluentd in order to get some logs from eg. NGINX which I use as a reverse proxy? Can someone please point me how exactly I can configure EFK on k8s and what are the best practices around it? On k8s I have eg. API service in Express JS.
You will find this article interesting for the begging:Kubernetes Logging and Monitoring: The Elasticsearch, Fluentd, and Kibana (EFK) Stack – Part 1: Fluentd Architecture and Configuration
Also there are a lot of fluentd plugins for kubernetes here: https://www.fluentd.org/plugins/all#stq=kubernetes&stp=1
Each plugin has installation instruction, for example Kubernetes Logging with Fluentd
Also you may want to try Fluent Bit is a lightweight and extensible Log Processor