Crio split logs into multiple lines stored at /var/log/containers/*.log

Solution In Progress - Updated -

Issue

  • On CoreOS host logs are stored at /var/log/containers/*.log and these logs are sent to Splunk. Crio split these logs into multiple lines.

  • Logs from build pod gets split into multiple lines by crio. Is there a way to merge it and get just one log line?

Log file on worker node: 

$ less /var/log/containers/dm-app-dm-core-1-build_dt-av-dm-future-ci_sti-build-eefd8e9ce5e1a331fda74c5ad3efb6bf02b4e402779d54e87405778be358b475.log
.....
2020-10-05T04:38:15.957601404+00:00 stdout P [INFO] DM :: AVShare :: Messagi
2020-10-05T04:38:15.957613838+00:00 stdout P ng :: Pa
2020-10-05T04:38:15.957623665+00:00 stdout P yloa
2020-10-05T04:38:15.957633327+00:00 stdout P d DM-
2020-10-05T04:38:15.957643860+00:00 stdout P ES ..
2020-10-05T04:38:15.957653967+00:00 stdout P ...... SUCC
2020-10-05T04:38:15.957663734+00:00 stdout P ESS
2020-10-05T04:38:15.957673538+00:00 stdout P [  0
2020-10-05T04:38:15.957683290+00:00 stdout P .471
2020-10-05T04:38:15.957693080+00:00 stdout F  s]

Environment

  • Red Hat OpenShift Container Platform (OCP)
    • 4.5.x

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content