<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>I might have found a bug in Kolla-Ansible (Victoria version) but
don't know where to file it. <br>
</p>
<p>This is about central logging. In my installation, none of the
interesting logs (Nova, Cinder, Neutron...) are sent to
Elasticsearch. I confirmed that using tcpdump.</p>
<p>I found that fluentd's config file
/etc/kolla/fluentd/td-agent.conf tags these logs with "kolla.*".
But later in the file, one finds filters like this:</p>
<p><font face="monospace"># Included from
conf/filter/01-rewrite-0.14.conf.j2:<br>
<match kolla.var.log.kolla.*.*.log><br>
@type rewrite_tag_filter<br>
capitalize_regex_backreference yes<br>
...<br>
<rule><br>
key programname<br>
pattern
^(nova-api|nova-compute|nova-compute-ironic|nova-conductor|nova-manage|nova-novncproxy|nova-scheduler|nova-placement-api|placement-api|privsep-helper)$<br>
tag openstack_python<br>
</rule><br>
</font></p>
<p></p>
<p>If I understand this right, this basically re-tags all nova logs
with "openstack_python".</p>
<p>The same config file has an output rule at the very end. I think
the intention is to make this a catch-all rule (or "match anything
else"):</p>
<p><font face="monospace"># Included from conf/output/01-es.conf.j2:<br>
<match *.**><br>
@type copy<br>
<store><br>
@type elasticsearch<br>
host 192.168.122.209<br>
port 9200<br>
scheme http<br>
<br>
etc.</font><br>
</p>
<p>Unfortunately, the <i>openstack_python</i> tag doesn't match <i>*.**</i>,
since it contains no dot. I fixed this with <match **>. Now
I receive all logs, but I am not sure if this is the right way to
fix it.<br>
</p>
<p>The error, if it is one, is in
<a class="moz-txt-link-freetext" href="https://opendev.org/openstack/kolla-ansible/src/branch/master/ansible/roles/common/templates/conf/output/01-es.conf.j2">https://opendev.org/openstack/kolla-ansible/src/branch/master/ansible/roles/common/templates/conf/output/01-es.conf.j2</a>.</p>
<p>If you want me to file a bug, please let me know how.</p>
<p>Bernd.<br>
</p>
<br>
</body>
</html>