diff --git a/content/en/docs/tasks/debug-application-cluster/audit.md b/content/en/docs/tasks/debug-application-cluster/audit.md index 4897ed4526..ec099f595f 100644 --- a/content/en/docs/tasks/debug-application-cluster/audit.md +++ b/content/en/docs/tasks/debug-application-cluster/audit.md @@ -276,7 +276,7 @@ Fluent-plugin-forest and fluent-plugin-rewrite-tag-filter are plugins for fluent 1. create a config file for fluentd ```none - $ cat < /etc/fluentd/config + $ cat <<'EOF' > /etc/fluentd/config # fluentd conf runs in the same host with kube-apiserver @type tail @@ -321,6 +321,7 @@ Fluent-plugin-forest and fluent-plugin-rewrite-tag-filter are plugins for fluent include_time_key true + EOF ``` 1. start fluentd @@ -373,6 +374,7 @@ different users into different files. path=>"/var/log/kube-audit-%{[event][user][username]}/audit" } } + EOF ``` 1. start logstash