Cmorgan2: trial content to see how the conversion is going

2017-08-18T20:08:30Z

trial content to see how the conversion is going

New page

= rsyslog =

A number of operating systems use rsyslog as the default logging service. Since it is natively able to send logs to a remote location, you do not have to install anything extra to enable this feature, just modify the configuration file. In doing this, consider running your logging over a management network or using an encrypted VPN to avoid interception.

== rsyslog client configuration ==

To begin, configure all OpenStack components to log to the syslog log file in addition to their standard log file location. Also, configure each component to log to a different syslog facility. This makes it easier to split the logs into individual components on the central server:

<code>nova.conf</code>:

<source lang="ini">use_syslog=True
syslog_log_facility=LOG_LOCAL0</source>
<code>glance-api.conf</code> and <code>glance-registry.conf</code>:

<source lang="ini">use_syslog=True
syslog_log_facility=LOG_LOCAL1</source>
<code>cinder.conf</code>:

<source lang="ini">use_syslog=True
syslog_log_facility=LOG_LOCAL2</source>
<code>keystone.conf</code>:

<source lang="ini">use_syslog=True
syslog_log_facility=LOG_LOCAL3</source>
By default, Object Storage logs to syslog.

Next, create <code>/etc/rsyslog.d/client.conf</code> with the following line:

<pre class="sourceCode none">*.* @192.168.1.10</pre>
This instructs rsyslog to send all logs to the IP listed. In this example, the IP points to the cloud controller.

== rsyslog server configuration ==

Designate a server as the central logging server. The best practice is to choose a server that is solely dedicated to this purpose. Create a file called <code>/etc/rsyslog.d/server.conf</code> with the following contents:

<pre class="sourceCode none"># Enable UDP
$ModLoad imudp
# Listen on 192.168.1.10 only
$UDPServerAddress 192.168.1.10
# Port 514
$UDPServerRun 514

# Create logging templates for nova
$template NovaFile,"/var/log/rsyslog/%HOSTNAME%/nova.log"
$template NovaAll,"/var/log/rsyslog/nova.log"

# Log everything else to syslog.log
$template DynFile,"/var/log/rsyslog/%HOSTNAME%/syslog.log"
*.* ?DynFile

# Log various openstack components to their own individual file
local0.* ?NovaFile
local0.* ?NovaAll
& ~</pre>
This example configuration handles the nova service only. It first configures rsyslog to act as a server that runs on port 514. Next, it creates a series of logging templates. Logging templates control where received logs are stored. Using the last example, a nova log from c01.example.com goes to the following locations:

* <code>/var/log/rsyslog/c01.example.com/nova.log</code>
* <code>/var/log/rsyslog/nova.log</code>

This is useful, as logs from c02.example.com go to:

* <code>/var/log/rsyslog/c02.example.com/nova.log</code>
* <code>/var/log/rsyslog/nova.log</code>

This configuration will result in a separate log file for each compute node as well as an aggregated log file that contains nova logs from all nodes.

OpsGuide-Logging-RSysLog - Revision history

Cmorgan2: trial content to see how the conversion is going