VCF Operations for Networks 9.0 is forwarding more log events to VCF Operations for Logs than in previous versions

Products

• VCF Operations for Networks

Issue/Introduction

• The number of log events received in VCF Operations for Logs from VCF Operations for Networks 9.0 platform and collector nodes is much larger than from a similarly configured VCF Operations for Networks 6.x installation.

Environment

• VCF Operations for Networks 9.0
• VCF Operations for Logs

Cause

In VCF Operations for Networks 9.0, additional services on the platform and collector nodes have been enabled for log forwarding beyond what was enabled in earlier versions.

VCF Operations for Networks 6.x logs that are forwarded:

On Platform and Collector Nodes:

/home/ubuntu/logs/launcher/launcher.STDOUT-<date>.log
/home/ubuntu/logs/launcher/launcher.STDOUT-<date>.log.error
/home/ubuntu/logs/monitoring/audit/audit-filtered.log
/home/ubuntu/logs/monitoring/auth/auth-filtered.log
/var/log/auth.log
/var/log/syslog
/var/log/audit/audit.log

On Platform Nodes Only:

/home/ubuntu/logs/restapilayer/restapilayer.STDOUT-<date>.log
/home/ubuntu/logs/restapilayer/restapilayer.STDOUT-<date>.log.error
/home/ubuntu/logs/saasservice/saasservice.STDOUT-<date>.log
/home/ubuntu/logs/saasservice/saasservice.STDOUT-<date>.log.error

On Collector Nodes Only:

/home/ubuntu/logs/collector/collector.STDOUT-<date>.log
/home/ubuntu/logs/collector/collector.STDOUT-<date>.log.error

VCF Operations for Networks 9.x logs that are forwarded:

On Platform and Collector Nodes:

/var/log/auth.log
/var/log/syslog
/var/log/arkin/autodiskcleanup.log
/var/log/arkin/cli.log
/var/log/arkin/configure_liagent.log
/var/log/arkin/cronFilterLogs.log
/var/log/arkin/disk_util.log
/var/log/arkin/fdb_log_cleaner.log
/var/log/arkin/liagent_actionstatus.log
/var/log/arkin/loginsight-solo.log
/var/log/arkin/nginx-chef-run.log
/var/log/arkin/pre-login-banner.log
/var/log/arkin/process_vrni_dump_files.log
/var/log/arkin/rdb.log
/var/log/arkin/root_password_change.log
/var/log/arkin/runLogRotator.log
/var/log/arkin/runNginxHealthCheck.log
/var/log/arkin/symb.log
/var/log/arkin/launcher/launcher.STDOUT-<date>.log
/var/log/arkin/launcher/launcher.STDOUT-<date>.log.error
/var/log/arkin/monitoring/audit/vrni_audit.log
/var/log/arkin/monitoring/audit/audit-filtered.log
/var/log/arkin/monitoring/auth/auth-filtered.log
/var/log/arkin/nginx/access.log
/var/log/arkin/nginx/error.log
/var/log/audit/audit.log

On Platform Nodes Only:

/var/log/arkin/arkin_cli_install.log                
/var/log/arkin/centralized_upgrade.log                        
/var/log/arkin/clustering.log                                  
/var/log/arkin/fix_policies.properties.log  
/var/log/arkin/flow_cache_wal_migrator.log  
/var/log/arkin/jn_health.log                
/var/log/arkin/kv_rest_server.log           
/var/log/arkin/misc.health.html.log
/var/log/arkin/path-analyzer-health.log
/var/log/arkin/policy-manager-health.log
/var/log/arkin/set_default_user_preference.log
/var/log/arkin/spawn_config.log
/var/log/arkin/vnera-jobs.log
/var/log/arkin/yarn_appdetails.log
/var/log/arkin/batch-analytics/batch-analytics.STDOUT-<date>.log
/var/log/arkin/batch-analytics/batch-analytics.STDOUT-<date>.log.error
/var/log/arkin/federation/federation.STDOUT-<date>.log
/var/log/arkin/federation/federation.STDOUT-<date>.log.error
/var/log/arkin/hadoop-yarn/hadoop-yarn-resourcemanager-platform1.log
/var/log/arkin/hadoop-yarn/hadoop-yarn-resourcemanager-aria-networks-platform.log
/var/log/arkin/hadoop-yarn/hadoop-yarn-nodemanager-platform1.log
/var/log/arkin/hadoop-yarn/hadoop-yarn-nodemanager-aria-networks-platform.log
/var/log/arkin/kafka/kafka.log
/var/log/arkin/kafka/server.log
/var/log/arkin/kafka/controller.log
/var/log/arkin/metric-store-updater/metric-store-updater.STDOUT-<date>.log
/var/log/arkin/metric-store-updater/metric-store-updater.STDOUT-<date>.log.error
/var/log/arkin/path-analyzer/path-analyzer.STDOUT-<date>.log
/var/log/arkin/path-analyzer/path-analyzer.STDOUT-<date>.log.error
/var/log/arkin/restapilayer/restapilayer.STDOUT-<date>.log
/var/log/arkin/restapilayer/restapilayer.STDOUT-<date>.log.error
/var/log/arkin/RetentionTool/RetentionTool.STDOUT-<date>.log
/var/log/arkin/RetentionTool/RetentionTool.STDOUT-<date>.log.error
/var/log/arkin/saasservice/saasservice.STDOUT-<date>.log
/var/log/arkin/saasservice/saasservice.STDOUT-<date>.log.error
/var/log/arkin/tsdb-server/tsdb-server.STDOUT-<date>.log
/var/log/arkin/tsdb-server/tsdb-server.STDOUT-<date>.log.error
/var/log/arkin/zookeeper/zookeeper-zookeeper-server-aria-networks-platform.log
/var/log/arkin/zookeepr/zookeeper-zookeeper-server-platform1.log

On Collector Nodes Only:

/var/log/arkin/collector/collector.STDOUT-<date>.log
/var/log/arkin/collector/collector.STDOUT-<date>.log.error
/var/log/arkin/flow-processor/flow-processor.STDOUT-<date>.log
/var/log/arkin/flow-processor/flow-processor.STDOUT-<date>.log.error
/var/log/arkin/grpc-telemetry-server/gprc-telemetry-server.STDOUT-<date>.log
/var/log/arkin/grpc-telemetry-server/gprc-telemetry-server.STDOUT-<date>.log.error
/var/log/arkin/latency-metrics/latency-metrics.STDOUT-<date>.log
/var/log/arkin/latency-metrics/latency-metrics.STDOUT-<date>.log.error

 

Note: Additional logs beyond those noted here may be forwarded.

Resolution

If the increased logging to VCF Operations for Logs is problematic, it can be disabled. See Configuring Log Sources for more information.

Additional Information

A future version of VCF Operations for Networks will allow more granular control of which services forward logs to VCF Operations for Logs.