yahoo-eng-team team mailing list archive

[Yushiro FURUKAWA <y.furukawa_2@xxxxxxxxxxxxxx>]

Public bug reported:

When I created log-resource with security_group, log data didn't show at
/var/log/syslog at all.

[Environment]
$ lsb_release -a; uname -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 16.04.4 LTS
Release:        16.04
Codename:       xenial
Linux kolla 4.4.0-130-generic #156-Ubuntu SMP Thu Jun 14 08:53:28 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux

devstack all-in-one

[Configuration]

/etc/neutron/neutron.conf
service_plugins = neutron.services.l3_router.l3_router_plugin.L3RouterPlugin,log

/etc/neutron/plugins/ml2/ml2_conf.ini
[securitygroup]
firewall_driver = openvswitch
[agent]
extensions = log

[Operation]
$ openstack server create --image cirros-0.3.5-x86_64-disk --flavor c1 --network private vm1
$ openstack network log create --resource-type security_group --resource <sg-id> --enable --event ALL sg-log

[ovs flow log]
I compared following conditions with'$ovs-ofctl dump-flows br-int':
http://paste.openstack.org/compare/726273/726272/

    1. Before creating log-resource
    2. After created log-resource

Logging rule has been set into br-int.  I wonder it relates
https://review.openstack.org/#/c/550421/  .

** Affects: neutron
     Importance: Undecided
         Status: New


** Tags: logging sg-fw

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1782576

Title:
  Logging - No SG-log data found at /var/log/syslog

Status in neutron:
  New

Bug description:
  When I created log-resource with security_group, log data didn't show
  at /var/log/syslog at all.

  [Environment]
  $ lsb_release -a; uname -a
  No LSB modules are available.
  Distributor ID: Ubuntu
  Description:    Ubuntu 16.04.4 LTS
  Release:        16.04
  Codename:       xenial
  Linux kolla 4.4.0-130-generic #156-Ubuntu SMP Thu Jun 14 08:53:28 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux

  devstack all-in-one

  [Configuration]

  /etc/neutron/neutron.conf
  service_plugins = neutron.services.l3_router.l3_router_plugin.L3RouterPlugin,log

  /etc/neutron/plugins/ml2/ml2_conf.ini
  [securitygroup]
  firewall_driver = openvswitch
  [agent]
  extensions = log

  [Operation]
  $ openstack server create --image cirros-0.3.5-x86_64-disk --flavor c1 --network private vm1
  $ openstack network log create --resource-type security_group --resource <sg-id> --enable --event ALL sg-log

  [ovs flow log]
  I compared following conditions with'$ovs-ofctl dump-flows br-int':
  http://paste.openstack.org/compare/726273/726272/

      1. Before creating log-resource
      2. After created log-resource

  Logging rule has been set into br-int.  I wonder it relates
  https://review.openstack.org/#/c/550421/  .

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1782576/+subscriptions