Bug 1517605

Description of problem:
Seems the logging system don't support crio. there are mainly three issues in crio.
1) The container log are written to /var/log/containers/. For docker daemon, the format is json file. But for crio,  It use rsyslog format.

For example:

2017-11-26T20:29:53.149616443-05:00 stderr I1127 01:29:53.149602       1 round_trippers.go:436] POST https://172.30.0.1:443/apis/authorization.k8s.io/v1beta1/subjectaccessreviews 201 Created in 0 milliseconds
2017-11-26T20:29:53.149668334-05:00 stderr I1127 01:29:53.149661       1 round_trippers.go:442] Response Headers:
2017-11-26T20:29:53.149694943-05:00 stderr I1127 01:29:53.149688       1 round_trippers.go:445]     Cache-Control: no-store
2017-11-26T20:29:53.149722042-05:00 stderr I1127 01:29:53.149710       1 round_trippers.go:445]     Content-Type: application/json
2017-11-26T20:29:53.149749783-05:00 stderr I1127 01:29:53.149743       1 round_trippers.go:445]     Content-Length: 538
2017-11-26T20:29:53.149770970-05:00 stderr I1127 01:29:53.149765       1 round_trippers.go:445]     Date: Mon, 27 Nov 2017 01:29:53 GMT
2017-11-26T20:29:53.149804101-05:00 stderr I1127 01:29:53.149796       1 request.go:836] Response Body: {"kind":"SubjectAccessReview","apiVersion":"authorization.k8s.io/v1beta1","metadata":{"creationTimestamp":null},"spec":{"resourceAttributes":{"verb":"update","group":"servicecatalog.k8s.io","version":"v1beta1","resource":"clusterserviceclasses","name":"5247e02c-d30c-11e7-aaad-fa163e4d160c"},"user":"system:serviceaccount:kube-service-catalog:service-catalog-controller","group":["system:serviceaccounts","system:serviceaccounts:kube-service-catalog","system:authenticated"]},"status":{"allowed":true,"reason":"allowed by cluster rule"}}


2) kibana failed to connect to  Elasticsearch, it report "Unable to connect to Elasticsearch at https://localhost:9200. "
3) curator was restarted many times, i think it couldn't connect to Elasticsearch too.


Version-Release number of selected component (if applicable):
openshift-ansible-3.7.9-1.git.4.d445616.el7.noarch

How reproducible:
always

Steps to Reproduce:
1. install OCP-3.7 with crio
openshift_use_crio=true
openshift_crio_systemcontainer_image_override=registry.access.xxx.redhat.com/openshift3/cri-o:v3.7

2. deploy logging

3. Check the fluent, elastic-search and Kibana.

Actual results:
 1) fluentd print noisy messege
 2) fluentd use docker configure file
 3) the container logs can't be collected.
 4) the kibana couldn't connected to elastic search
 5) curator are restarted many times

Expected results:
Both system and container logs can be collected

Additional info: