Uploaded image for project: 'OpenShift Logging'
  1. OpenShift Logging
  2. LOG-3729

[release-5.6] /var/log/oauth-server/audit.log not being scraped by log collector

XMLWordPrintable

    • False
    • None
    • False
    • NEW
    • NEW
    • Before this update, OAuth login events stored in `/var/log/auth-server/audit.log` were not captured by the Fluentd collector. After this update, all login event from the OAuth service are collected as it expected.
    • Log Collection - Sprint 230, Log Collection - Sprint 231, Log Collection - Sprint 232
    • Important
    • QE Confirmed
    • Proposed

      Description of problem:

      Since the introduction of https://issues.redhat.com/browse/AUTH-6 the login and login failure events have been captured in /var/log/auth-server/audit.log.  However, the only files that get scraped by fludentd are /var/log/oauth-apiserver/audit.log and var/log/openshift-apiserver/audit.log meaning that the login events are getting missed.

      Version-Release number of selected component (if applicable):

      4.11

      How reproducible:

      No audit login or login failures are captured by fluentd for forwarding.

      Steps to Reproduce:

      1.
2.
3.

      Actual results:

       

      Expected results:

       

      Additional info:

       

              vparfono Vitalii Parfonov
              rh-ee-pollenbu Phill Ollenbuttel (Inactive)
              Anping Li Anping Li
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: