Created attachment 1261478 [details] inventory file used for logging deployment to let this bz repro Description of problem: Created according to discussions in https://bugzilla.redhat.com/show_bug.cgi?id=1426137 Roll over log entries are visible when openshift_logging_fluentd_journal_read_from_head is default to empty on journald log driver envs. Issue did not repro when openshift_logging_fluentd_journal_read_from_head is not specified. Version-Release number of selected component (if applicable): openshift-ansible-3.5.28-1.git.0.103513e.el7.noarch How reproducible: Always Steps to Reproduce: 1.Deploy logging 3.5.0 with ansible scripts ,including this parameter: openshift_logging_fluentd_use_journal = true and make sure parameter "openshift_logging_fluentd_journal_read_from_head "is unspecified in the inventory file 2.Tail ES log for namespaces that was created prior to EFK deployments 3.Log in kibana Actual results: 2.Index mappings was created in ES for namespaces that was created prior to EFK deployments 3.Roll over logs are displayed Expected results: 2.Index mappings should not be created in ES for namespaces that was created prior to EFK deployments 3.Roll over logs (and indices) should not exist Additional info: inventory file used for logging deployment was attached
Is this a problem of seeing duplicate logs in Kibana? Or are you not expecting to see old logs?
(In reply to Peter Portante from comment #1) > Is this a problem of seeing duplicate logs in Kibana? No > Or are you not expecting to see old logs? Yes
According to https://bugzilla.redhat.com/show_bug.cgi?id=1426137#c22, I'm considering on adjusting the test scope here, and the situation when openshift_logging_fluentd_journal_read_from_head is not set (default to false) is test passed with 3.6 installer, please feel free to transfer back to ON_QA for closure. Thanks!
Set to verified according to comment #3. Image tested with: logging-fluentd v3.6 b9eeeec142af 17 hours ago 231.7 MB # openshift version openshift v3.6.144 kubernetes v1.6.1+5115d708d7 etcd 3.2.1 ansible version: openshift-ansible-playbooks-3.6.144-1.git.0.50e12bf.el7.noarch
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:3049