Bug 1978655 - ELK integration fails due to missing configuration parameters
Summary: ELK integration fails due to missing configuration parameters
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Virtualization Manager
Classification: Red Hat
Component: ovirt-engine-metrics
Version: 4.4.6
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ovirt-4.4.10
: 4.4.10
Assignee: Aviv Litman
QA Contact: Guilherme Santos
URL:
Whiteboard:
Depends On: 1994580 1996777
Blocks: 1985977
TreeView+ depends on / blocked
 
Reported: 2021-07-02 12:15 UTC by Shruti
Modified: 2022-08-17 18:55 UTC (History)
16 users (show)

Fixed In Version: ovirt-engine-metrics-1.4.4
Doc Type: Bug Fix
Doc Text:
Previously, ELK integration failed due to missing configuration parameters when using certificates. In this release, the missing parameters were added, and updated to the correct names according to the logging role. ELK integration now works with or without certificates.
Clone Of:
Environment:
Last Closed: 2022-02-08 10:04:44 UTC
oVirt Team: Metrics
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2022:0461 0 None None None 2022-02-08 10:05:02 UTC
oVirt gerrit 115720 0 master MERGED Fix /roles/oVirt.logging/tasks/main.yml to fit linux-system-roles 2021-07-28 12:24:57 UTC
oVirt gerrit 116204 0 master MERGED Delete the defaults certs+key paths, and update LSR version 2021-09-02 08:38:06 UTC

Description Shruti 2021-07-02 12:15:23 UTC
Description of problem:

As per KCS https://access.redhat.com/articles/4921101 when we execute /usr/share/ovirt-engine-metrics/setup/ansible/configure_ovirt_machines_for_metrics.sh script , it  destroys /etc/rsyslog.d directory and it cannot find ca and other custom certificates.

The following configuration changes need to be reviewed.

1) The tls* section is missing in the documentation. Unless added manually ELK completely rejects the messages. 

~~~
            tls.cacert="/etc/rsyslog.d/elkca.pem"
            tls.mycert="/etc/rsyslog.d/infrarhvelkslv.crt"
            tls.myprivkey="/etc/rsyslog.d/infrarhvelkslv.key"
~~~

2) searchType parameter should be customizable as it defaults to "com.redhat.viaq.common"

3) It's completely missing the index name correctly set in ovirt_env_name variable

4) elasticsearch_host should be a list not a single hostname, the documentation seems pointing only to a server.

Comment 9 Lukas Svaty 2021-07-12 08:51:20 UTC
Moving needinfo to Lucie

Comment 32 Martin Perina 2021-08-17 14:14:40 UTC
Moving to 4.4.9 because the fix cannot be delivered before BZ1994580 is fixed in the logging role

Comment 43 errata-xmlrpc 2022-02-08 10:04:44 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (RHV Manager (ovirt-engine) [ovirt-4.4.10]), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:0461


Note You need to log in before you can comment on or make changes to this bug.