Docker logs -> Filebeat container -> OpenSearch infra-logs
Ref T1624
Details
Details
- Reviewers
dereckson - Maniphest Tasks
- T1624: Install an Elastic stack for nasqueron-infra forest
Collect logs from docker-001
Diff Detail
Diff Detail
- Repository
- rOPS Nasqueron Operations
- Lint
Lint Passed - Unit
No Test Coverage - Branch
- opensearch
- Build Status
Buildable 3823 Build 4073: arc lint + arc unit
Event Timeline
| roles/opensearch/opensearch/files/roles.yml | ||
|---|---|---|
| 217 | Careful when manually converting JSON to YAML ERR: Seems /opt/opensearch/plugins/opensearch-security/securityconfig/roles.yml is not in OpenSearch Security 7 format: com.fasterxml.jackson.dataformat.yaml.snakeyaml.error.MarkedYAMLException: while parsing a block collection
in 'reader', line 217, column 7:
- "cluster_monitor",
^
expected <block end>, but found ','
in 'reader', line 217, column 26:
- "cluster_monitor", | |
| pillar/paas/docker.sls | ||
|---|---|---|
| 149 | yaml.composer.ComposerError: found undefined alias in "<unicode string>", line 149, column 24 Seems the alias must be defined BEFORE first use. | |
Comment Actions
OpenSearch. OpenSearch part looks good: we've the role and the user.
Filebeat. Docker container runs, load the harvesters correctly, but use http and not https to try to connect to OpenSearch:
{"level":"error","timestamp":"2022-01-09T21:51:06.179Z","logger":"publisher_pipeline_output","caller":"pipeline/output.go:154","message":"Failed to connect to backoff(elasticsearch(http://cloudhugger.nasqueron.org:9200)): Get \"http://cloudhugger.nasqueron.org:9200\": EOF"}
Comment Actions
{"level":"error","timestamp":"2022-01-09T21:54:40.939Z","logger":"publisher_pipeline_output","caller":"pipeline/output.go:154","message":"Failed to connect to backoff(elasticsearch(https://cloudhugger.nasqueron.org:9200)): Get \"https://cloudhugger.nasqueron.org:9200\": x509: certificate signed by unknown authority"}