Description of problem: In /var/log/messages, fluentD is looking for a rollover date format similar to 'messages-20160613' but if it is anything else it will create errors and will not pass the logs through the system. Elastic Search Will appear to pass logs along but Fluentd logs will look like the following: 2016-06-17 04:13:00 -0400 [warn]: failed to expand `%Q[#{ Time.at(time) > Time.now ? (temp_time = Time.parse(Time.at(time).to_s.gsub(Time.at(time).year.to_s, (tag_parts[3].nil? ? Time.at(time).year.to_s : tag_parts[3][9,4]) )).to_datetime.to_s; Time.parse(temp_time) > Time.now ? Time.parse(temp_time.gsub(Time.parse(temp_time).year.to_s, (Time.parse(temp_time).year - 1).to_s )).to_datetime.to_s : Time.parse(temp_time).to_datetime.to_s ) : Time.at(time).to_datetime.to_s }]` error_class=TypeError error="no implicit conversion of nil into String" 2016-06-17 04:13:00 -0400 [warn]: suppressed same stacktrace Which looks similar to https://bugzilla.redhat.com/show_bug.cgi?id=1347368 but is different because the systems are on GMT timezone.
https://github.com/openshift/origin-aggregated-logging/issues/173
merged in https://github.com/openshift/origin-aggregated-logging/pull/202. Moving to modified
This has been merged and is in OSE v3.3.0.14 or newer.
I jumped the gun on this. It hasn't been pulled in yet. Dropping this back down to Modified.
Was blocked by https://bugzilla.redhat.com/show_bug.cgi?id=1366137
blocked by https://bugzilla.redhat.com/show_bug.cgi?id=1368301
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2016:1933