Fluentd log parsing cannot grok Horizon logs
Bug #1898174 reported by
Stig Telfer
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
kolla-ansible |
Confirmed
|
Medium
|
Doug Szumski | ||
Stein |
Confirmed
|
Medium
|
Doug Szumski | ||
Train |
Confirmed
|
Medium
|
Doug Szumski | ||
Ussuri |
Confirmed
|
Medium
|
Doug Szumski | ||
Victoria |
Confirmed
|
Medium
|
Doug Szumski |
Bug Description
It appears that all logs from Horizon are throwing parse errors from fluentd of this form:
got incomplete line before first line from /var/log/
Horizon logs take this form:
[Wed Sep 30 17:02:00.196771 2020] [:error] [pid 16] Logging out user "".
This is not the same format as logs from other OpenStack services, but is apparently being parsed as though it is.
This issue was seen on Rocky and Train OpenStack releases.
To post a comment you must log in.
A quick fix could be to exclude the Horizon log from 00-global.conf and process this log with other Apache logs. The format isn't the same as the access logs, but we're not currently doing much parsing on them anyway.