Description of problem: As per KCS https://access.redhat.com/articles/4921101 when we execute /usr/share/ovirt-engine-metrics/setup/ansible/configure_ovirt_machines_for_metrics.sh script , it destroys /etc/rsyslog.d directory and it cannot find ca and other custom certificates. The following configuration changes need to be reviewed. 1) The tls* section is missing in the documentation. Unless added manually ELK completely rejects the messages. ~~~ tls.cacert="/etc/rsyslog.d/elkca.pem" tls.mycert="/etc/rsyslog.d/infrarhvelkslv.crt" tls.myprivkey="/etc/rsyslog.d/infrarhvelkslv.key" ~~~ 2) searchType parameter should be customizable as it defaults to "com.redhat.viaq.common" 3) It's completely missing the index name correctly set in ovirt_env_name variable 4) elasticsearch_host should be a list not a single hostname, the documentation seems pointing only to a server.
Moving needinfo to Lucie
Moving to 4.4.9 because the fix cannot be delivered before BZ1994580 is fixed in the logging role
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (RHV Manager (ovirt-engine) [ovirt-4.4.10]), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2022:0461