Bug 1736760

Summary: [Docs][Admin] Use new rsyslog format for setting up a host logging server
Product: Red Hat Enterprise Virtualization Manager Reporter: Javier Coscia <jcoscia>
Component: DocumentationAssignee: Eli Marcus <emarcus>
Status: CLOSED CURRENTRELEASE QA Contact: Petr Kubica <pkubica>
Severity: high Docs Contact:
Priority: medium    
Version: 4.3.0CC: emarcus, lleistne, lsurette, lsvaty, pelauter, pkubica, sradco, srevivo, tburke
Target Milestone: ovirt-4.3.8Keywords: Documentation, Task, ZStream
Target Release: ---Flags: emarcus: needinfo+
pkubica: needinfo-
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-12-15 15:49:30 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Metrics RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Javier Coscia 2019-08-01 21:57:57 UTC
Document URL: 

 * https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/html/administration_guide/setting_up_a_host_logging_server

Section Number and Name: 

 * 20.5. Setting Up a Host Logging Server

Describe the issue: 

 * Step #2 uses the legacy rsyslog format
 
Suggestions for improvement: 

 * Docs should give an example using the new rsyslog format
 
   - Step 2 should mention to create a custom .conf file on the syslog server, /etc/rsyslog.d/from_remote.conf for example, with the following content:
     ~~~
     template(name="DynFile" type="string" string="/var/log/%HOSTNAME%/%PROGRAMNAME%.log")
     ruleset(name="RemoteMachine"){  action(type="omfile" dynaFile="DynFile")  }
     module(load="imudp")
     input(type="imudp" port="514" ruleset="RemoteMachine")
     ~~~

   - Remove the `Uncomment the following` below example in step 2

   - Add another step/example to configure rsyslog.conf in hypervisor side to send logs to remote and restart rsyslog service on the hypervisor too.
     
     Add the following line into /etc/rsyslog.conf in hypervisor
     ~~~
     *.info;mail.none;authpriv.none;cron.none @<syslog-FQDN>:514
     ~~~

     Restart rsyslog in hypervisor
     ~~~
     # systemctl restart rsyslog
     ~~~


Additional information:

Comment 6 Javier Coscia 2019-11-21 11:15:50 UTC
I'm sorry, haven't seen this NI on me. LGTM Thanks