[Openstack] compute node secure message flood rootwrap.conf ovs-ofctl dump-flows br-int table=22
Gary Kotton
gkotton at vmware.com
Tue Mar 24 14:08:20 UTC 2015
Hi,
In neutron conf you can set debug=False
Thanks
Gary
On 3/24/15, 4:01 PM, "Uwe Sauter" <uwe.sauter.de at gmail.com> wrote:
>Hi,
>
>is it possible to disable the logging of this particular command for
>/var/log/neutron/openvswitch-agent.log ?
>
>Given the high frequency it makes it really hard and annoying to read the
>logs for debugging purposes.
>
>
>Regards,
>
> Uwe
>
>Am 24.03.2015 um 13:52 schrieb Lars Kellogg-Stedman:
>> On Tue, Mar 24, 2015 at 02:22:18PM +0700, Chris wrote:
>>> On our compute nodes the /var/log/secure log get flooded with the same
>>>kind
>>> of messages:
>>>
>>> Mar 22 10:17:57 xxx sudo: neutron : TTY=unknown ; PWD=/ ; USER=root ;
>>> COMMAND=/usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf ovs-ofctl
>>> dump-flows br-int table=22
>>>
>>> Any hint what's the purpose of this and how to fix it?
>>
>> The purpose is that neutron is monitoring the flow rules in that
>> particular table, probably in order ensure they remain correct.
>> Because neutron is running as an unprivileged user, it needs to use
>> "sudo" to gain elevated privileges.
>>
>> The `sudo` command is, by default, quite verbose, which makes sense in
>> an environment where 'sudo' commands happen rarely as the result of
>> manual administrator actions. In an environment where it is part of
>> frequent automated tasks it can be an annoyance.
>>
>> You can disable these messages for a *particular* user using syntax
>> like this:
>>
>> Defaults:neutron !syslog
>>
>> This will disable syslogging of sudo activity for user "neutron" while
>> still leaving it enabled for everyone else.
>>
>>
>>
>> _______________________________________________
>> Mailing list:
>>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack at lists.openstack.org
>> Unsubscribe :
>>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>
>
>
>_______________________________________________
>Mailing list:
>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>Post to : openstack at lists.openstack.org
>Unsubscribe :
>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
More information about the Openstack
mailing list