Cloudwatch logging of an EKS cluster

• Enable or Disable per log type
• log types like api,audit,authenticator,control manager,scheduler
• Each log type creates its own Cloud Watch log stream
• name prefix /aws/eks/cluster-name
• Logging adds some additional Cost to storage

Create cloudwatch.yaml file for Cloud watch (We can enable/disable by using GUI)

apiVersion: eksctl.io/v1alpha5
kind: ClusterConfig

metadata:
  name: EKS-raman-cluster
  region: eu-north-1

nodeGroups:
  - name: ng-1
    instanceType: t3.small
    desiredCapacity: 3
    ssh: # use existing EC2 key
      publicKeyName: eunorth1
cloudWatch:
  clusterLogging:
    enableTypes: ["api", "audit", "authenticator"]

Enable cloudwatch logging

  eksctl utils update-cluster-logging --config-file cloudwatch.yaml --approve

disable via plain commandline call

eksctl utils update-cluster-logging --name=EKS-raman-cluster --disable-types all --approve