-
Bug
-
Resolution: Unresolved
-
Undefined
-
None
-
Logging 6.0, Logging 6.1
-
None
URL: https://docs.openshift.com/container-platform/4.16/observability/logging/logging-6.0/log6x-upgrading-to-6.html#red-hat-managed-elasticsearch
The example contains two major issues:
1. It's missing the "serviceAccount" definition mandatory in Logging 6
serviceAccount:
name: collector
2.The index value can't use `log_type` for the reason explained in the article https://access.redhat.com/solutions/7105074 as it leads to the logs being rejected by Elasticsearch with an error similar to:
2025-01-27T20:58:45.812354Z ERROR sink{component_kind="sink" component_id=output_default_elasticsearch component_type=elasticsearch}: vector::sinks::util::retries: Not retriable; dropping the request. reason="error type: index_not_found_exception, reason: no such index and [action.auto_create_index] contains [-*-write] which forbids automatic creation of the index" internal_log_rate_limit=true
Workaround
Longer explanation about the error and workaround available in the article: https://access.redhat.com/solutions/7105074
