From 48d7b08773d02b75f65dccdd17237e40b432b3d9 Mon Sep 17 00:00:00 2001 From: Mohammed Naser Date: Sun, 23 Sep 2018 13:48:14 -0400 Subject: [PATCH] Drop extra Ceph messages Ceph has a problem where logs that were introduced which are debug messages are logged as normal. They cause a lot of extra useless messages and overloading ELK cluster This was fixed in 12.2.9 which is not out yet, so let's work around it for now by avoiding shipping it. Change-Id: I36a503b7380ce62c65570232a18d2179a98ecfa1 --- .../roles/elastic_filebeat/templates/filebeat.yml.j2 | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/elk_metrics_6x/roles/elastic_filebeat/templates/filebeat.yml.j2 b/elk_metrics_6x/roles/elastic_filebeat/templates/filebeat.yml.j2 index 4501548e..5c50c138 100644 --- a/elk_metrics_6x/roles/elastic_filebeat/templates/filebeat.yml.j2 +++ b/elk_metrics_6x/roles/elastic_filebeat/templates/filebeat.yml.j2 @@ -991,6 +991,11 @@ filebeat.prospectors: - /var/log/ceph/ceph-osd.*.log - /openstack/log/*ceph*/ceph-osd*.log + # NOTE(mnaser): Workaround for following Ceph bug + # http://tracker.ceph.com/issues/35716 + exclude_lines: + - '.*challenging authorizer.*' + # Optional additional fields. These fields can be freely picked # to add additional information to the crawled log files for filtering tags: