-
Bug
-
Resolution: Done
-
Undefined
-
Logging 5.9.15
-
Product / Portfolio Work
-
False
-
-
False
-
NEW
-
NEW
-
-
Bug Fix
-
-
-
Log Collection - Sprint 271, Log Collection - Sprint 272, Log Collection - Sprint 273, Logging - Sprint 274, Logging - Sprint 275, Logging - Sprint 276
Description of problem:
$oc logs pod/collector-wxb5r -c collector --tail=25
2025-05-28T10:11:58.230310Z ERROR transform
2025-05-28T10:11:58.230328Z ERROR transform{component_kind="transform" component_id=output_logs_json component_type=remap}
: vrl::stdlib::log: function call error for "parse_json" at (11:40): function call error for "string" at (22:39): expected string, got null internal_log_rate_secs=1 vrl_position=62
2025-05-28T10:11:58.521887Z ERROR transform
2025-05-28T10:12:02.335430Z ERROR transform{component_kind="transform" component_id=output_logs_json component_type=remap}
: vrl::stdlib::log: Internal log [function call error for "parse_json" at (11:40): function call error for "string" at (22:39): expected string, got null] has been suppressed 1 times.
2025-05-28T10:12:02.335448Z ERROR transform
2025-05-28T10:12:02.335470Z ERROR transform{component_kind="transform" component_id=output_logs_json component_type=remap}
: vrl::stdlib::log: Internal log [function call error for "parse_json" at (11:40): function call error for "string" at (22:39): expected string, got null] is being suppressed to avoid flooding.
How reproducible:
Always
Steps to Reproduce:
- Forward logs to syslogserver
apiVersion: logging.openshift.io/v1
kind: ClusterLogForwarder
metadata:
name: collector
spec:
outputs:
- name: logs
type: syslog
url: tcp://syslogserver.syslog-aosqe.svc:6514
pipelines:
- inputRefs:
- application
- audit
name: syslog-pl
outputRefs:
- logs
serviceAccountName: logcollector
- Check the collector pod logs
- ...