-
Bug
-
Resolution: Done
-
Critical
-
Logging 5.5.5
-
False
-
-
False
-
NEW
-
Release Notes
-
VERIFIED
-
* Before this update, the collector did not set `level` fields correctly based on priority for systemd logs. With this update, `level` fields are set correctly.
-
Bug Fix
-
Done
-
-
-
-
Log Collection - Sprint 229, Log Collection - Sprint 230, Log Collection - Sprint 231, Log Collection - Sprint 232
-
Moderate
Description of problem:
- The PRIORITY field is missing from systemd infrastructure logs.
- The "level" field is not set based on the systemd priority.
- When the level cannot be calculated, the "level" field is set to "default".
It should be "unknown"
Version-Release number of selected component (if applicable):
logging 5.5.
How reproducible:
100%
Steps to Reproduce:
Examine infra node logs on a cluster. Here's an example:
{
"@timestamp": "2022-12-13T21:10:12.178209Z",
"hostname": "master-0.sno-1.hqlab.lan",
"level": "default",
"log_type": "infrastructure",
"message": "No valid linuxptp status.",
"openshift": {
"labels": {
"cluster": "sno-1",
"clustertype": "spoke",
"datacenter": "WC Lab",
"geolocation": "",
"region": ""
}
},
"systemd": {
"t": {
"BOOT_ID": "4a9a8ef5a673411cb4ab6d01b843fc31",
"CAP_EFFECTIVE": "ffffffffff",
"COMM": "logger",
"GID": "0",
"MACHINE_ID": "6260e1eb1fca4c88bfb36fd5366a3d3f",
"PID": "1211325",
"SELINUX_CONTEXT": "system_u:system_r:unconfined_service_t:s0",
"TRANSPORT": "syslog",
"UID": "0"
},
"u": {
"SYSLOG_FACILITY": "5",
"SYSLOG_IDENTIFIER": "ptp-chronyd"
}
},
"tag": ".journal.system",
"time": "2022-12-13T21:10:12+00:00"
}
Actual results:
- No PRIORITY
- "level": "default"
Expected results:
PRIORITY and level set, e.g.
- "PRIORITY": "3"
- "level": "error"
Not relevant for systemd logs but for other logs that the collector can't categorize, "level": "unknown", not "default"
Additional info:
- is cloned by
-
LOG-3630 [release-5.5] Inconsistencies in vector normalization of systemd logs.
-
- Closed
-
- links to
- mentioned on
(2 mentioned on)