1Z0-1067-25 Question 117
Select 2You have an application running on Oracle Container Engine for Kubernetes (OKE). Each microservice writes logs to stdout and stderr. You created a log group in the Observability & Management console to centralize your logs for analysis, but you still see no data captured. Which two actions must you take to ensure that the container logs are ingested into Oracle Logging?
- A
Enable workload logging in OKE, specifying cluster-level logging for stdout and stderr and assigning the log group.
- B
Build your microservice containers to write logs to a custom path under /var/log on the worker nodes.
- C
Create an IAM policy granting the OKE worker nodes permission to push logs to the Logging service.
- D
Configure a separate Object Storage bucket to collect container logs before they are forwarded to Logging.
Show answer and explanation
Correct answers: A, C
Explanation
To implement observability with OKE, you must both enable workload logging for stdout/stderr at the cluster level and ensure the worker nodes have the necessary IAM permissions. Without enabling OKE workload logging and configuring an IAM policy, the logs will not be ingested into the Logging service. For more details, see Oracle Cloud Infrastructure documentation for Observability and Management and the OKE logging setup guide.
- A. Correct.
Option 1 is correct. In OKE, you must explicitly enable workload logging and point your stdout/stderr logs to a log group. This configuration ensures that the logs from containers are collected and forwarded to Oracle Logging.
- B. Incorrect.
Option 2 is incorrect. While you can redirect logs to certain directories, Oracle� logging integration for OKE relies on capturing stdout and stderr from containers. You do not have to rebuild microservice containers to write to a custom path for Oracle Logging to collect them.
- C. Correct.
Option 3 is correct. The OKE worker nodes need sufficient permissions to push logs to the Logging service. Creating an appropriate IAM policy for the dynamic group containing your worker nodes is essential to allow log ingestion.
- D. Incorrect.
Option 4 is incorrect. You do not need to configure a separate Object Storage bucket just to gather and forward container logs for real-time ingestion. Ingestion into Logging happens directly from the OKE service when correctly configured.