Hi, When i was evaluating the configuration of the central logging proof of concept docker image described here: https://www.freeipa.org/page/Centralized_Logging i noticed that the rsyslog mmnormalization rules did not work properly and failed to parse keywords. Elasticsearch indexes does not get properly filled. This lead to the visualizations and dashboards are broken in Kibana.
The reason is that custom repos was being used to install newer version of rsyslog, rsyslog-mmnormalize and rsyslog-elasticsearch (8.8.0-2), liblognorm (1.1.1-1 and liblogging (1.0.4-4). These repos do not work anymore since the content has been removed. The repos are: https://copr-be.cloud.fedoraproject.org/results/jhrozek/rsyslog<https://copr-be.cloud.fedoraproject.org/results/jhrozek/rsyslog/> https://copr-be.cloud.fedoraproject.org/results/jhrozek/liblognorm<https://copr-be.cloud.fedoraproject.org/results/jhrozek/liblognorm/> https://copr-be.cloud.fedoraproject.org/results/jhrozek/liblogging Liblognorm version in RHEL 7 are normally 0.3.7. It would be of interest if these newer versions could be made available for RHEL 7 in the near future since they would make RHEL 7 as a log server platform much more interesting. This e-mail is private and confidential between the sender and the addressee. In the event of misdirection, the recipient is prohibited from using, copying or disseminating it or any information in it. Please notify the above if any misdirection.
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project