Bug 2066397 - [RHOSP16.1] logging-environment-rsyslog.yaml environment file support array of Elasticsearch targets
Summary: [RHOSP16.1] logging-environment-rsyslog.yaml environment file support array o...
Keywords:
Status: CLOSED DUPLICATE of bug 1945334
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-tripleo-heat-templates
Version: 16.1 (Train)
Hardware: x86_64
OS: Linux
medium
low
Target Milestone: z9
: 16.1 (Train on RHEL 8.2)
Assignee: Martin Magr
QA Contact: Leonid Natapov
Joanne O'Flynn
URL:
Whiteboard:
Depends On:
Blocks: 2066905 2066908
TreeView+ depends on / blocked
 
Reported: 2022-03-21 16:45 UTC by Dustin Ash
Modified: 2023-01-03 21:31 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: Enhancement
Doc Text:
Feature: rsyslog environment configuration now supports an array of Elasticsearch targets. Reason: Prior releases only allowed a single target to be specified. Result: Multiple Elasticsearch targets can now be specified as a list of endpoints to send logs to.
Clone Of:
: 2066905 (view as bug list)
Environment:
Last Closed: 2022-03-22 19:44:30 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github voxpupuli puppet-rsyslog pull 184 0 None Merged Allow multiple array values for actions 2022-03-22 05:58:16 UTC
Red Hat Issue Tracker OSP-14082 0 None None None 2022-03-21 16:54:52 UTC

Description Dustin Ash 2022-03-21 16:45:32 UTC
Description of problem:
Problem appears when customer uses the required format [1] on the logging-environment-rsyslog.yaml environment file, the overcloud deployment injects the Elasticsearch servers array in the following incorrect format to the rsyslog containers:  server="[10.28.26.224, 10.28.26.225, 10.28.26.226]" which is not supported by rsyslog and causes the following container error: 

rsyslogd: omelasticsearch: we are suspending ourselfs due to server failure 3: Host name '[10.28.26.224, 10.28.26.225, 10.28.26.226]' contains bad letter [v8.1911.0-3.el8 try https://www.rsyslog.com/e/2007 ] 

rsyslog configuration specifies the required format for an array of Elastisearch servers in [1]: server=["elasticsearch1", "elasticsearch2"]. When customer directly modifies the rsyslog container configuration using this specific format, rsyslog works properly and logs are sent to Elasticsearch. 


Version-Release number of selected component (if applicable):
openstack-tripleo-heat-templates-11.3.2-1.20210104205664.el8ost.2.noarch

How reproducible:


Steps to Reproduce:
1. Deploy with following syntax in logging-environment-rsyslog.yaml
    server: ["10.28.26.224", "10.28.26.225", "10.28.26.226"]


Actual results:
Incorrect format is deployed to the rsyslog containers:  
server="[10.28.26.224, 10.28.26.225, 10.28.26.226]" which is not supported by rsyslog and causes the following container error: 

rsyslogd: omelasticsearch: we are suspending ourselfs due to server failure 3: Host name '[10.28.26.224, 10.28.26.225, 10.28.26.226]' contains bad letter [v8.1911.0-3.el8 try https://www.rsyslog.com/e/2007 ] 



Expected results:
following format deployed to rsyslog containers:
server=["elasticsearch1", "elasticsearch2"]


Additional info:

Actual deployed
    server="[10.28.26.224, 10.28.26.225, 10.28.26.226]"
Expected deployed:
    server=["elasticsearch1", "elasticsearch2"]

Comment 6 Leif Madsen 2022-03-22 19:44:30 UTC
Duplicate of https://bugzilla.redhat.com/show_bug.cgi?id=1945334 which is resolved and will ship in the next z-stream release.

*** This bug has been marked as a duplicate of bug 1945334 ***


Note You need to log in before you can comment on or make changes to this bug.