Project

General

Profile

Bug #13175

rudder agent log files content in user facility

Added by tim c over 1 year ago. Updated about 1 year ago.

Status:
Released
Priority:
N/A
Category:
Generic methods
Target version:
Severity:
User visibility:
Effort required:
Priority:
0

Description

Information about environement:

  • OS: Debian 9.5 and 8.11
  • syslog-ng version: 3.8 and 3.5
  • Rudder agent version: 4.3.3

When a « File content » directive run on a node, file content is logged in syslog-ng.

For example (syslog-ng trace) :

Aug  8 10:49:06 hostname syslog-ng[2552]: Incoming log entry; line='dummy line in a configuration file'

Aug  8 10:49:06 hostame syslog-ng[2552]: Filter rule evaluation begins; rule='f_syslog3', location='/etc/syslog-ng/syslog-ng.conf:131:19'
Aug  8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='match', type='facility'
Aug  8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='not-match', type='level'
Aug  8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='not-match', type='AND'
Aug  8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='match', type='filter(f_debug)'
Aug  8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='match', type='AND'
Aug  8 10:49:06 hostame syslog-ng[2552]: Filter rule evaluation result; result='match', rule='f_syslog3', location='/etc/syslog-ng/syslog-ng.conf:131:19'

Aug  8 10:49:06 hostame syslog-ng[2552]: Filter rule evaluation begins; rule='f_user', location='/etc/syslog-ng/syslog-ng.conf:132:16'
Aug  8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='match', type='facility'
Aug  8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='not-match', type='level'
Aug  8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='not-match', type='AND'
Aug  8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='match', type='filter(f_debug)'
Aug  8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='match', type='AND'
Aug  8 10:49:06 hostame syslog-ng[2552]: Filter rule evaluation result; result='match', rule='f_user', location='/etc/syslog-ng/syslog-ng.conf:132:16'

Aug  8 10:49:06 hostame syslog-ng[2552]: Filter rule evaluation begins; rule='f_messages', location='/etc/syslog-ng/syslog-ng.conf:119:20'
Aug  8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='match', type='level'
Aug  8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='match', type='facility'
Aug  8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='match', type='AND'
Aug  8 10:49:06 hostame syslog-ng[2552]: Filter rule evaluation result; result='match', rule='f_messages', location='/etc/syslog-ng/syslog-ng.conf:119:20'

At the moment we have created a syslog-ng rule to redirect every lines coming from user facility to /dev/null but is not convenient because some applications use this facility too.

If you need our syslog-ng configuration tell us.


Related issues

Related to Rudder - Bug #13608: file enforce content log file content which can have private infoReleasedActions

Associated revisions

Revision bfee24d4 (diff)
Added by Nicolas CHARLES about 1 year ago

Fixes #13175: rudder agent log files content in user facility

History

#1

Updated by Benoît PECCATTE about 1 year ago

  • Related to Bug #13608: file enforce content log file content which can have private info added
#2

Updated by Benoît PECCATTE about 1 year ago

  • Tracker changed from Question to Bug
  • Priority set to 0
#3

Updated by Nicolas CHARLES about 1 year ago

  • Project changed from Rudder to ncf
  • Category deleted (Agent)
  • Target version set to 4.3.5
#4

Updated by Nicolas CHARLES about 1 year ago

  • Category set to Generic methods

Fixing the reporting for the branch 4.3 here

#5

Updated by Nicolas CHARLES about 1 year ago

  • Status changed from New to In progress
  • Assignee set to Nicolas CHARLES
#6

Updated by Nicolas CHARLES about 1 year ago

  • Status changed from In progress to Pending technical review
  • Assignee changed from Nicolas CHARLES to Alexis MOUSSET
  • Pull Request set to https://github.com/Normation/ncf/pull/839
#7

Updated by Nicolas CHARLES about 1 year ago

  • Status changed from Pending technical review to Pending release
#8

Updated by Vincent MEMBRÉ about 1 year ago

  • Status changed from Pending release to Released
This bug has been fixed in Rudder 4.3.5 and 5.0.1 which were released today.
Changelog
Changelog

Also available in: Atom PDF