Uploaded image for project: 'OpenShift Logging'
  1. OpenShift Logging
  2. LOG-3863

Issue with the incoming message from vector to syslog

XMLWordPrintable

    • False
    • None
    • False
    • NEW
    • VERIFIED
    • Log Collection - Sprint 234

      While forwarding logs to syslog using vector, there seems to be an issue with the incoming message from vector. 
      The logs doesn't contain meaningful metadata (namespace, pod_name, pod_id, container id, clusterID and etc)
      Here is the output:

      23-03-24T12:02:45.031Z  -[]
      2023-03-24T12:02:44.676Z  -[] I0324 12:02:44.676763       1 handler.go:119]  "msg"="Instance not marked for termination" "namespace"="openshift-machine-api" "node"="ip-10-0-146-232.us-east-2.compute.internal"
      2023-03-24T12:02:44.814Z  -[] {"message": "MERGE_JSON_LOG=true", "level": "debug","Layer1": "layer1 0", "layer2": {"name":"Layer2 1", "tips":"Decide by PRESERVE_JSON_LOG"}, "StringNumber":"10", "Number": 10,"foo.bar":"Dot Item","{foobar}":"Brace Item","[foobar]":"Bracket Item", "foo:bar":"Colon Item","foo bar":"Space Item" }
      2023-03-24T12:02:44.995Z  -[] {"message": "MERGE_JSON_LOG=true", "level": "debug","Layer1": "layer1 0", "layer2": {"name":"Layer2 1", "tips":"Decide by PRESERVE_JSON_LOG"}, "StringNumber":"10", "Number": 10,"foo.bar":"Dot Item","{foobar}":"Brace Item","[foobar]":"Bracket Item", "foo:bar":"Colon Item","foo bar":"Space Item" }
      2023-03-24T12:02:44.996Z  -[] {"message": "MERGE_JSON_LOG=true", "level": "debug","Layer1": "layer1 0", "layer2": {"name":"Layer2 1", "tips":"Decide by PRESERVE_JSON_LOG"}, "StringNumber":"10", "Number": 10,"foo.bar":"Dot Item","{foobar}":"Brace Item","[foobar]":"Bracket Item", "foo:bar":"Colon Item","foo bar":"Space Item" }
      2023-03-24T12:02:44.605Z  -[] {"message": "MERGE_JSON_LOG=true", "level": "debug","Layer1": "layer1 0", "layer2": {"name":"Layer2 1", "tips":"Decide by PRESERVE_JSON_LOG"}, "StringNumber":"10", "Number": 10,"foo.bar":"Dot Item","{foobar}":"Brace Item","[foobar]":"Bracket Item", "foo:bar":"Colon Item","foo bar":"Space Item" }
      2023-03-24T12:02:44.892Z  -[] {"message": "MERGE_JSON_LOG=true", "level": "debug","Layer1": "layer1 0", "layer2": {"name":"Layer2 1", "tips":"Decide by PRESERVE_JSON_LOG"}, "StringNumber":"10", "Number": 10,"foo.bar":"Dot Item","{foobar}":"Brace Item","[foobar]":"Bracket Item", "foo:bar":"Colon Item","foo bar":"Space Item" }
      2023-03-24T12:02:45.108Z  -[]
      2023-03-24T12:02:45.163Z  -[]
      2023-03-24T12:02:45.163Z  -[]
      2023-03-24T12:02:45.163Z  -[]
      2023-03-24T12:02:45.175Z  -[]
      2023-03-24T12:02:45.175Z  -[]
      2023-03-24T12:02:44.735Z  -[] <info>  [1679659364.7358] dhcp4 (ens5): state changed new lease, address=10.0.181.241
      2023-03-24T12:02:45.192Z  -[]
      2023-03-24T12:02:45.200Z  -[]
      2023-03-24T12:02:45.200Z  -[]
      2023-03-24T12:02:45.203Z  -[]
      2023-03-24T12:02:45.211Z  -[]
      2023-03-24T12:02:45.211Z  -[]
      2023-03-24T12:02:45.214Z  -[]
      2023-03-24T12:02:45.217Z  -[]
      2023-03-24T12:02:45.220Z  -[]
      2023-03-24T12:02:45.228Z  -[]
      2023-03-24T12:02:45.231Z  -[]
      2023-03-24T12:02:45.170Z  -[] I0324 12:02:45.170122       1 log.go:198] Apply / Create of (rbac.authorization.k8s.io/v1, Kind=ClusterRole) /multus-admission-controller-webhook was successful
      2023-03-24T12:02:45.170Z  -[] I0324 12:02:45.170172       1 log.go:198] reconciling (rbac.authorization.k8s.io/v1, Kind=ClusterRoleBinding) /multus-admission-controller-webhook

      Also the log files have mixed messages, infra-container.log file has app logs.

              syedriko_sub@redhat.com Sergey Yedrikov
              gkarager Giriyamma Karagere Ramaswamy (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: