Bug 2034793

Summary:	Document collection and transport of /var/log/messages via rsyslog to remote server
Product:	Red Hat OpenStack	Reporter:	Eric Nothen <enothen>
Component:	documentation	Assignee:	mgeary <mgeary>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Leonid Natapov <lnatapov>
Severity:	medium	Docs Contact:	mgeary <mgeary>
Priority:	medium
Version:	16.2 (Train)	CC:	astupnik, csibbitt, enothen, lmadsen, mmagr, mrunge, oblaut
Target Milestone:	z2	Keywords:	Documentation, Triaged
Target Release:	17.1
Hardware:	All
OS:	All
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:	2034730	Environment:
Last Closed:	2023-11-07 14:15:33 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2026290, 2034730
Bug Blocks:

Description Eric Nothen 2021-12-22 07:26:06 UTC

+++ This bug was initially created as a clone of Bug #2034730 (which is a clone of Bug #2026290) +++

Description of problem:

/var/log/messages is not processed by rsyslog when customer enables centralized logging option following document [1]. 

I am not sure if the default behavior should be to include this file when forwarding all OpenStack logs to an external server. What I see from a customer side is that they need to include it due to auditing requirements.

For the time being, they use the following definition on a custom template, perhaps this should instead be the default behavior when forwarding logs:

~~~
parameter_defaults:
    ExtraConfig:
        tripleo_logging_sources_messages:
            - tag: openstack.host.messages
              file: /var/log/host/messages
~~~

Additional discussion on this topic on Bugs #2026290 and #2034730.

[1] https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.1/html/logging_monitoring_and_troubleshooting_guide/installing-and-configuring-the-logs-service_osp

Comment 2 Chris Sibbitt 2022-01-05 16:21:22 UTC

Marking this FutureFeature since it is not an existing feature

Comment 3 Takashi Kajinami 2022-02-28 02:02:56 UTC

Just wondering whether backporting https://review.opendev.org/c/openstack/tripleo-heat-templates/+/781596 would make sense.
It would allow users to define the required log files according to their requirements, rather than implementing individual files in tht.

Comment 10 Matthias Runge 2023-05-11 17:10:53 UTC

This should be at least documented.