Uploaded image for project: 'Red Hat Advanced Cluster Security'
  1. Red Hat Advanced Cluster Security
  2. ROX-27688

Audit logs not published in the Cloud Service

    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • False
    • Impediment
    • 0

      https://redhat-internal.slack.com/archives/C07385ZCG5B/p1736872492034389

      Problem

      We use Vector to send audit logs to cloudwatch. Vector service on production has error logs about not able to parse JSON.

      Root cause

      Regression after the protobuf upgrade. Vector doesn't support multiline strings in requests, and we changed the format with the upgrade:

      Before:

      new(jsonpb.Marshaler).MarshalToString(message)
      

      Now:

      msgStr := protojson.Format(message)
      

      From the doc:

      // Format formats the message as a multiline string.
      // This function is only intended for human consumption and ignores errors.
      // Do not depend on the output being stable. Its output will change across
      // different builds of your program, even when using the same version of the
      // protobuf module.
      

              ykovalev@redhat.com Yury Kovalev
              ykovalev@redhat.com Yury Kovalev
              ACS Cloud Service
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: