yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #75121
[Bug 1796200] [NEW] Network security group logging not working: empty file being created w/o actual logs
Public bug reported:
Network security group logging not working: empty file being created w/o
actual logs
On the clear Openstack (Ubuntu Xenial, Queens release) I have tried to
enable a security groups logging as stated in
https://docs.openstack.org/neutron/queens/admin/config-logging.html doc,
and it's not working as expected.
Actual behaviour: Logfile has been created in place specified in config from "neutron" user, but it's empty.
Expected behaviour: Logfile has been created & NSG traffic data also being logged into.
Additional information:
a) OpenStack has been deployed from scratch using Juju and upstream
bundles (with only two charms being modified locally, enabling necessary
config changes for following upstream documentation mentioned above),
here is actual charm link: http://paste.openstack.org/show/731530/
b) Full OpenStack configuration commands from flavors till verifying
that networking itself is working:
http://paste.openstack.org/show/731529/ (take a look at the EOF: I'm
trying to ping my instance floating IP, I cannot, but after enabling a
rule in NSG it succeeded - so traffic is actually being passed to
instance and security groups are working);
c) Config files that should be modified, according to documentation:
neutron-api neutron.conf: http://paste.openstack.org/show/731531/
neutron-gateway /etc/neutron/plugins/ml2/openvswitch_agent.ini: http://paste.openstack.org/show/731534/
nova-compute /etc/neutron/plugins/ml2/openvswitch_agent.ini: http://paste.openstack.org/show/731535/
** Affects: neutron
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1796200
Title:
Network security group logging not working: empty file being created
w/o actual logs
Status in neutron:
New
Bug description:
Network security group logging not working: empty file being created
w/o actual logs
On the clear Openstack (Ubuntu Xenial, Queens release) I have tried to
enable a security groups logging as stated in
https://docs.openstack.org/neutron/queens/admin/config-logging.html
doc, and it's not working as expected.
Actual behaviour: Logfile has been created in place specified in config from "neutron" user, but it's empty.
Expected behaviour: Logfile has been created & NSG traffic data also being logged into.
Additional information:
a) OpenStack has been deployed from scratch using Juju and upstream
bundles (with only two charms being modified locally, enabling
necessary config changes for following upstream documentation
mentioned above), here is actual charm link:
http://paste.openstack.org/show/731530/
b) Full OpenStack configuration commands from flavors till verifying
that networking itself is working:
http://paste.openstack.org/show/731529/ (take a look at the EOF: I'm
trying to ping my instance floating IP, I cannot, but after enabling a
rule in NSG it succeeded - so traffic is actually being passed to
instance and security groups are working);
c) Config files that should be modified, according to documentation:
neutron-api neutron.conf: http://paste.openstack.org/show/731531/
neutron-gateway /etc/neutron/plugins/ml2/openvswitch_agent.ini: http://paste.openstack.org/show/731534/
nova-compute /etc/neutron/plugins/ml2/openvswitch_agent.ini: http://paste.openstack.org/show/731535/
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1796200/+subscriptions
Follow ups