Uploaded image for project: 'OpenShift Logging'
  1. OpenShift Logging
  2. LOG-3499

/var/log/oauth-server/audit.log not being scraped by log collector

    XMLWordPrintable

Details

    • False
    • None
    • False
    • NEW
    • NEW
    • Before this update, OAuth login events stored in `/var/log/auth-server/audit.log` were not captured by the Fluentd collector. After this update, all login event from the OAuth service are collected as it expected.
    • Log Collection - Sprint 230, Log Collection - Sprint 231, Log Collection - Sprint 232
    • Important
    • QE Confirmed
    • Proposed

    Description

      Description of problem:

      Since the introduction of https://issues.redhat.com/browse/AUTH-6 the login and login failure events have been captured in /var/log/auth-server/audit.log.  However, the only files that get scraped by fludentd are /var/log/oauth-apiserver/audit.log and var/log/openshift-apiserver/audit.log meaning that the login events are getting missed.

      Version-Release number of selected component (if applicable):

      4.11

      How reproducible:

      No audit login or login failures are captured by fluentd for forwarding.

      Steps to Reproduce:

      1.
2.
3.

      Actual results:

       

      Expected results:

       

      Additional info:

       

      Attachments

        Issue Links

          is cloned by

          Bug - A problem that impairs or prevents the functions of the product. LOG-3729 [release-5.6] /var/log/oauth-server/audit.log not being scraped by log collector

          • Normal - To be worked after urgent and high priorities are resolved. This term is chosen when the severity of an issue is relatively close to the level of effort to fix it. The existence of an easily implemented workaround can also lead to this priority level instead of a higher priority.
          • Closed

          Bug - A problem that impairs or prevents the functions of the product. LOG-3730 [release-5.5] /var/log/oauth-server/audit.log not being scraped by log collector

          • Normal - To be worked after urgent and high priorities are resolved. This term is chosen when the severity of an issue is relatively close to the level of effort to fix it. The existence of an easily implemented workaround can also lead to this priority level instead of a higher priority.
          • Closed

          Bug - A problem that impairs or prevents the functions of the product. LOG-3731 [release-5.4] /var/log/oauth-server/audit.log not being scraped by log collector

          • Normal - To be worked after urgent and high priorities are resolved. This term is chosen when the severity of an issue is relatively close to the level of effort to fix it. The existence of an easily implemented workaround can also lead to this priority level instead of a higher priority.
          • Closed
          links to

          GitHub openshift/cluster-logging-operator#1857: LOG-3499: add /var/log/oauth-server/audit.log to the log collection path

          GitHub openshift/cluster-logging-operator#1863: [release-5.6] LOG-3499: add /var/log/oauth-server/audit.log to the log collection path

          GitHub openshift/cluster-logging-operator#1864: [release-5.5] LOG-3499: add /var/log/oauth-server/audit.log to the log collection path

          GitHub openshift/cluster-logging-operator#1865: [release-5.4] LOG-3499: add /var/log/oauth-server/audit.log to the log collection path

          GitHub openshift/cluster-logging-operator#1871: LOG-3499: add volume mount for /var/log/oauth-server/

          GitHub openshift/cluster-logging-operator#1879: [release-5.6] LOG-3499: add volume mount for /var/log/oauth-server/

          GitHub openshift/cluster-logging-operator#1881: [release-5.5] LOG-3499: add volume mount for /var/log/oauth-server/

          mentioned on

          GitLab Merge request - Updated 2 upstream sources

          GitLab Merge request - Updated 2 upstream sources

          GitLab Merge request - Updated US source to: 1e08c97 Merge pull request #1864 from vparfonov/log3499-5.5

          GitLab Merge request - Updated US source to: 537f6b3 Merge pull request #1857 from vparfonov/log3499

          GitLab Merge request - Updated US source to: 8789215 Merge pull request #1865 from vparfonov/log3499-5.4

          GitLab Merge request - Updated US source to: e9a4e0e Merge pull request #1850 from jcantrill/log3429

          Activity

            People

              vparfono Vitalii Parfonov
              rh-ee-pollenbu Phill Ollenbuttel (Inactive)
              Anping Li Anping Li
              Votes:
              1 Vote for this issue
              Watchers:
              12 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: