<p>I have set up EFK on Kubernetes, currently I have access only to logs from logstash but wondering how can I install some plugins for Fluentd in order to get some logs from eg. NGINX which I use as a reverse proxy? Can someone please point me how exactly I can configure EFK on k8s and what are the best practices around it? On k8s I have eg. API service in Express JS.</p>

camel
<p>You will find this article interesting for the begging:<a href="https://platform9.com/blog/kubernetes-logging-and-monitoring-the-elasticsearch-fluentd-and-kibana-efk-stack-part-1-fluentd-architecture-and-configuration/" rel="nofollow noreferrer">Kubernetes Logging and Monitoring: The Elasticsearch, Fluentd, and Kibana (EFK) Stack – Part 1: Fluentd Architecture and Configuration</a></p>

<p>Also there are a lot of fluentd plugins for kubernetes here: <a href="https://www.fluentd.org/plugins/all#stq=kubernetes&amp;stp=1" rel="nofollow noreferrer">https://www.fluentd.org/plugins/all#stq=kubernetes&amp;stp=1</a></p>

<p>Each plugin has installation instruction, for example <a href="https://docs.fluentd.org/v0.12/articles/kubernetes-fluentd" rel="nofollow noreferrer">Kubernetes Logging with Fluentd</a></p>

<p>Also you may want to try <a href="https://github.com/fluent/fluent-bit-kubernetes-logging" rel="nofollow noreferrer">Fluent Bit</a> is a lightweight and extensible Log Processor</p>
