Correct Pod Architecture while using NFS?

General Discussions
1

I don’t know whether its the correct place to ask this, if it’s not, then please suggest where I can ask this.

I am using AWS EFS for persistent storage. I have many applications running and I create a PVC for each application. I need persistent storage for the application logs only. Now, I need these logs in Elasticsearch also. So, I use Filebeat to do so. So, this is my architecture,

Kubernetes%20Filebeat%402x
Kubernetes Filebeat@2x.png1457×984 80.2 KB

I just want to get feedback on this architecture. Is it correct? What can be the drawbacks of this? How are you using Volumes to send data to ELK?

2

Have you looked at using fluentd to foward the logs to ElasticSearch? This would eliminate the need to have a PVC for logging on each app.