<p>I am new to Kubernetes <code>NetworkPolicy</code> and the Network plugin <code>calico</code>.</p>

<p>I have successfully implemented <code>calico</code> in my Kubernetes cluster:</p>

<pre><code>[root@node1 ~]# kubectl get po --all-namespaces -o wide | grep calico
kube-system     calico-kube-controllers-5d8b5bc986-sllmk                          1/1       Running
kube-system     calico-node-4wk8f                                                 1/1       Running
kube-system     calico-node-5kz99                                                 1/1       Running
kube-system     calico-node-bfk9w                                                 1/1       Running
kube-system     calico-node-f2tb2                                                 1/1       Running
kube-system     calico-node-hrcf4                                                 1/1       Running
kube-system     calico-node-wvh8d                                                 1/1       Running
</code></pre>

<p>I have also configured relevant network policies and they work perfectly fine.</p>

<p>The only only I am concerned about is logging. I am unable to find any logs that could tell me whether some request is being accepted or blocked.</p>

<p>Ive tried checking the logs of the <code>calico-nodes-*</code> pods but they do not provide any reasonable logs.</p>

<p>Are there any others logs that I can look at ?  </p>

<p>You can inspect calico-node containers logs across your Kubernetes cluster within this path <code>/var/log/calico</code>, or it can be modified via <code>--log-dir</code> parameter used in <code>calicoctl node run</code> command, as described in this <a href="https://docs.projectcalico.org/v1.5/usage/troubleshooting/logging" rel="nofollow noreferrer">link</a>. </p>

<p>However, if you want to observe logs along <a href="https://chrislovecnm.com/kubernetes/cni/choosing-a-cni-provider/" rel="nofollow noreferrer">CNI Network</a>, please visit this <a href="https://docs.projectcalico.org/v3.0/getting-started/kubernetes/troubleshooting" rel="nofollow noreferrer">page</a>. </p>

<p>I found it very helpful to log out events from Calico CNI using <code>kubelet</code> as target point and then collect them via <code>systemd</code>, besides you can specify a value for <code>log_level</code> parameter.</p>
