Journald as source and kafka as sink

[therus000]

i try to deploy vector with this config in kubernets :
data_dir: /vector-data-dir
api:
enabled: false
sources:
journald:
type: journald

sinks:
  kafka:
    type: kafka
    inputs:
      - journald
    bootstrap_servers: wwwwssssasas
    topic: "logs"
    encoding:
      codec: json
    sasl:
      enabled: true  
      mechanism: "SCRAM-SHA-512"
      username: "sssasr"

and i got this error in logs of vector. it cannot collect logs from journald

2022-12-20T07:28:49.817678Z INFO source{component_kind="source" component_id=journald component_type=journald component_name=journald}: vector::sources::journald: Starting journalctl.
2022-12-20T07:28:49.818131Z ERROR source{component_kind="source" component_id=journald component_type=journald component_name=journald}: vector::sources::journald: Error starting journalctl process. error=journalctl failed to execute: No such file or directory (os error 2)

what i miss here. anyone can help"?

[bruceg]

This looks like the journalctl command can't be found in the container, or isn't in the PATH. The journald component relies on that program to provide its log stream.

[EdN-terascope]

Had a similar problem and knew that jounalctl was in the pod - added its location with journalctl_path: "/bin/journalctl"

https://vector.dev/docs/reference/configuration/sources/journald/#journalctl_path

[Kenya-West]

For any stranger wondering why it is not working in docker container - switch to :latest-debian tag in image line.