Uploaded image for project: 'Observability and Data Analysis Program'
  1. Observability and Data Analysis Program
  2. OBSDA-807

Investigate Time usage in the collector

XMLWordPrintable

    • Icon: Feature Feature
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • None
    • Log Collection, PM Logging
    • None
    • 2
    • False
    • None
    • False
    • Not Selected
    • 0

      Summary

      Investigate how the collector utilizes time and passes that information to a data store, specifically loki. We need to answer:

      • How do I search for a log message from a given time range?
      • What time value is sent with the log message: CRIO time, timestamp in the message, time log collected, time ingested
      • What value is set in the 'timestamp' (e.g. @timestamp) of the log envelope?

      Ref: 

      * loki aggregated logs use log scraping timestamp instead of source timestamp
      * With upstream loki, it is possible to modify timestamps to use the source timestamp instead of the scraping timestamp, but with Openshift Loki Operator such a modification is not possible,
      

              Unassigned Unassigned
              jcantril@redhat.com Jeffrey Cantrill
              Votes:
              11 Vote for this issue
              Watchers:
              13 Start watching this issue

                Created:
                Updated: