1 Answers
A:
Envoy access logging should be enabled and configured to output to standard output (/dev/stdout) in order to export Istio logs to a SIEM with least-privilege scopes. The logs should then be collected and sent using a Kubernetes-native log forwarder that has restricted permissions. This keeps the logging agent from being granted extensive cluster-level rights.
Find the Best Cyber Security Software
Explore all products with features, pricing, reviews and more
View All SoftwareDisclaimer
Techjockey’s software industry experts offer advice for educational and informational purposes only. A category or product query or issue posted, created, or compiled by Techjockey is not meant to replace your independent judgment.
20,000+ Software Listed
Best
Price Guaranteed
Free Expert
Consultation
2M+
Happy Customers