Too long log message could be split by rsyslog
Issue
-
In the configuration file of rsyslog, by setting the output of facility, OpenShift related logs are set not to be output to
/var/log/messages. However, it was observed that a large number of Openshift logs were output to/var/log/messages. -
Settings in /etc/rsyslog.conf
*.info;mail.none;authpriv.none;cron.none;local6.none;local1.none;local2.none;local3.none;local4.none;local5.none;local0.none /var/log/messages
# OpenShift audit log
local3.* /logs/audit/ocp-audit.log
# OpenShift application log
local4.* /logs/application/ocp-application.log
# OpenShift infrastructure log
local5.* /logs/infrastructure/ocp-infrastructure.log
Environment
- Red Hat Enterprise Linux 8
- Rsyslog
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.