Bug 1881996

Summary: error="'Metadata' is not a designated severity" when enable syslogforward via configmap
Product: OpenShift Container Platform Reporter: Anping Li <anli>
Component: LoggingAssignee: Jeff Cantrill <jcantril>
Status: CLOSED ERRATA QA Contact: Giriyamma <gkarager>
Severity: high Docs Contact:
Priority: unspecified    
Version: 4.5CC: anli, aos-bugs, brejones, gkarager, gparente, jcantril, mnunes, ocasalsa, periklis, qitang
Target Milestone: ---Keywords: Reopened, UpcomingSprint
Target Release: 4.5.z   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: logging-exploration
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1852341 Environment:
Last Closed: 2020-10-26 14:55:25 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1852341    
Bug Blocks:    

Comment 3 Giriyamma 2020-10-21 07:22:40 UTC
Verified this bz on 4.5.0-0.nightly-2020-10-20-022340, the issue is fixed.

oc get csv
NAME                                           DISPLAY                  VERSION                 REPLACES                                       PHASE
clusterlogging.4.5.0-202010161522.p0           Cluster Logging          4.5.0-202010161522.p0   clusterlogging.4.5.0-202010090328.p0           Succeeded
elasticsearch-operator.4.5.0-202010161522.p0   Elasticsearch Operator   4.5.0-202010161522.p0   elasticsearch-operator.4.5.0-202010081312.p0   Succeeded

Comment 4 Giriyamma 2020-10-23 04:26:26 UTC
I hit the same issue again while upgrading logging operators from 4.4 to 4.5:

$ oc logs fluentd-2bgqg
Setting each total_size_limit for 2 buffers to 9621286195 bytes
Setting queued_chunks_limit_size for each buffer to 1146
2020-10-23 03:48:31 +0000 [warn]: parameter 'pos_file_compaction_interval' in <source>
  @type tail
  @id container-input
  path "/var/log/containers/*.log"
  exclude_path ["/var/log/containers/fluentd-*_openshift-logging_*.log","/var/log/containers/elasticsearch-*_openshift-logging_*.log","/var/log/containers/kibana-*_openshift-logging_*.log"]
  pos_file "/var/log/es-containers.log.pos"
  pos_file_compaction_interval 1800
  refresh_interval 5
  rotate_wait 5
  tag "kubernetes.*"
  read_from_head true
  @label @CONCAT
  <parse>
    @type "multi_format"
    <pattern>
      format json
      time_format "%Y-%m-%dT%H:%M:%S.%N%Z"
      keep_time_key true
      time_type string
    </pattern>
    <pattern>
      format regexp
      expression /^(?<time>.+) (?<stream>stdout|stderr)( (?<logtag>.))? (?<log>.*)$/
      time_format "%Y-%m-%dT%H:%M:%S.%N%:z"
      keep_time_key true
    </pattern>
  </parse>
</source> is not used.
2020-10-23 03:48:31 +0000 [warn]: parameter 'pos_file_compaction_interval' in <source>
  @type tail
  @id audit-input
  @label @INGRESS
  path "/var/log/audit/audit.log"
  pos_file "/var/log/audit/audit.log.pos"
  pos_file_compaction_interval 1800
  tag "linux-audit.log"
  <parse>
    @type "viaq_host_audit"
  </parse>
</source> is not used.
2020-10-23 03:48:31 +0000 [warn]: parameter 'pos_file_compaction_interval' in <source>
  @type tail
  @id k8s-audit-input
  @label @INGRESS
  path "/var/log/kube-apiserver/audit.log"
  pos_file "/var/log/kube-apiserver/audit.log.pos"
  pos_file_compaction_interval 1800
  tag "k8s-audit.log"
  <parse>
    @type "json"
    time_key "requestReceivedTimestamp"
    keep_time_key true
    time_format "%Y-%m-%dT%H:%M:%S.%N%z"
    time_type string
  </parse>
</source> is not used.
2020-10-23 03:48:31 +0000 [warn]: parameter 'pos_file_compaction_interval' in <source>
  @type tail
  @id openshift-audit-input
  @label @INGRESS
  path "/var/log/openshift-apiserver/audit.log"
  pos_file "/var/log/openshift-apiserver/audit.log.pos"
  pos_file_compaction_interval 1800
  tag "openshift-audit.log"
  <parse>
    @type "json"
    time_key "requestReceivedTimestamp"
    keep_time_key true
    time_format "%Y-%m-%dT%H:%M:%S.%N%z"
    time_type string
  </parse>
</source> is not used.
2020-10-23 03:48:31 +0000 [warn]: emit transaction failed: error_class=ArgumentError error="'Metadata' is not a designated severity" location="/opt/rh/rh-ruby25/root/usr/local/share/gems/gems/syslog_protocol-0.9.2/lib/syslog_protocol/packet.rb:95:in `severity='" tag="openshift-audit.log"

Comment 5 Jeff Cantrill 2020-10-23 15:20:25 UTC
Setting UpcomingSprint as unable to resolve before EOD

Comment 7 errata-xmlrpc 2020-10-26 14:55:25 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 4.5.16 extras update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:4270