openstack/openstack-ansible-ops
Code Issues Proposed changes

Fix Filebeat/Auditbeat conflict

Browse Source 
The default Filebeat prospectors currently look for all log files in
/var/log/. This can cause conflicts with auditbeat, which also monitors
audit log files in /var/log and can fail to get a lock on the appropriate
log files, subsequently failing. This commit explicitly removes audit
log files from the Filebeat prospector path to remove this conflict.

Change-Id: I2146bd6f4980610f32d27896406167458e08dffe
This commit is contained in:
Duncan Martin Walker 2020-03-09 16:15:04 +00:00
parent 0d3c20580f
commit df54d05bb8
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
elk_metrics_7x/roles/elastic_filebeat/defaults/main.yml
View File

@ -265,7 +265,7 @@ filebeat_prospectors:
enabled: "{{ filebeat_system_enabled | default(true) }}"
paths:
- /openstack/log/ansible-logging/*.log
- /var/log/*.log
- /var/log/!(auth*).log
- /var/log/libvirt/*.log
- /var/log/libvirt/*/*.log
- /var/log/lxc/*.log