Bug 1816770
Summary: | Fluentd inserts \\'\\' into some log messages ingested from container logs | |||
---|---|---|---|---|
Product: | OpenShift Container Platform | Reporter: | Sergey Yedrikov <syedriko> | |
Component: | Logging | Assignee: | Sergey Yedrikov <syedriko> | |
Status: | CLOSED ERRATA | QA Contact: | Qiaoling Tang <qitang> | |
Severity: | medium | Docs Contact: | ||
Priority: | unspecified | |||
Version: | 4.5 | CC: | aos-bugs | |
Target Milestone: | --- | |||
Target Release: | 4.5.0 | |||
Hardware: | All | |||
OS: | All | |||
Whiteboard: | ||||
Fixed In Version: | Doc Type: | Bug Fix | ||
Doc Text: |
Cause:
Incorrect line separator configured in Fluentd for container log lines split across multiple lines in CRI-O logs.
Consequence:
Fluentd inserts \\'\\' into some log messages ingested from container logs.
Fix:
Configure the correct (empty) line separator for Fluentd.
Result:
Fluentd no longer inserts \\'\\' into some log messages ingested from container logs.
|
Story Points: | --- | |
Clone Of: | ||||
: | 1816836 1816837 (view as bug list) | Environment: | ||
Last Closed: | 2020-08-04 18:06:56 UTC | Type: | Bug | |
Regression: | --- | Mount Type: | --- | |
Documentation: | --- | CRM: | ||
Verified Versions: | Category: | --- | ||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
Cloudforms Team: | --- | Target Upstream Version: | ||
Embargoed: | ||||
Bug Depends On: | ||||
Bug Blocks: | 1816836 |
Description
Sergey Yedrikov
2020-03-24 17:09:14 UTC
More details on how to repro this issue: Once the logging-load-driver job has completed 2. Create a route for Elasticsearch as described in https://docs.openshift.com/container-platform/4.3/logging/config/cluster-logging-elasticsearch.html#cluster-logging-elasticsearch-exposing_cluster-logging-elasticsearch. 3. Install https://github.com/taskrabbit/elasticsearch-dump as described in https://github.com/taskrabbit/elasticsearch-dump#installing. 4. Dump the logs generated by the logging-load-driver job, substituting the kubernetes.pod_name with the pod name of the completed job and your authorization token from "oc whoami -t": ./node_modules/elasticdump/bin/elasticdump --input=https://elasticsearch-openshift-logging.apps-crc.testing/.operations.* --output=$ --searchBody='{"_source": ["pipeline_metadata.collector.received_at", "message"], "query":{"bool": { "must": [{ "term": { "kubernetes.pod_name": "logging-load-driver-phwcz"}}]}}}' --headers='{"Authorization": "Bearer 1u9oYgxIhzQOYxoHYfjPXEROshmanQNjROCz3jNZ-Yg"}' > out 5. Run (this is not a joke) $ grep \\\\\\\\\'\\\\\\\\\' out You're looking for entries likes this (note "loader seq \\'\\'"): {"_index":".operations.2020.03.22","_type":"com.redhat.viaq.common","_id":"YmI2YTAyZTktYjY5OC00ZTQxLTg3YzQtNmQzODA0NmZiZGMz","_score":2.0310788,"_source":{"pipeline_metadata":{"collector":{"received_at":"2020-03-22T04:25:00.058292+00:00"}},"message":"loader seq \\'\\'- 8edc9164e37340bb8b5608e5fea61cc8 - 0000102090 - xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"}} whereas normal ones look like this {"_index":".operations.2020.03.22","_type":"com.redhat.viaq.common","_id":"OTIwNDI1ZmYtODdlYy00ZjhiLWIzZDEtOWU5N2ZmMjEzMjg2","_score":2.0310788,"_source":{"pipeline_metadata":{"collector":{"received_at":"2020-03-22T04:11:40.262683+00:00"}},"message":"loader seq - 8edc9164e37340bb8b5608e5fea61cc8 - 0000021977 - xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"}} Verified with quay.io/openshift/origin-cluster-logging-operator@sha256:8bd2ace2cec60113512bf5f2ff621ae2bbc3b16d7de00b844ea10e09f0b9cfd1 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (OpenShift Container Platform 4.5 image release advisory), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:2409 |