Application logs are not appearing as expected in the external Elasticsearch logstore in RHOCP 4

Solution Verified - Updated -

Issue

  • Aplication logs are not displaying as expected in the external Elasticsearch logstore.
  • Collector pods are continuously streaming the following error logs:

    YYYY-MM-DDTHH:MM:SS.0000000Z YYYY-MM-DDTHH:MM:SS.00000Z ERROR sink{component_kind="sink" component_id=output_elasticsearch_eck component_type=elasticsearch}: vector::sinks::util::retries: Not retriable; dropping the request. reason="error type: mapper_parsing_exception, reason: object mapping for [parsed_message] tried to parse field [parsed_message] as object, but found a concrete value" internal_log_rate_limit=true
    

Environment

  • Red Hat OpenShift Container Platform
    • 4
  • Red Hat OpenShift Logging (RHOL)
    • 5

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content