Skip to content
This repository has been archived by the owner on Dec 27, 2022. It is now read-only.

Write logs to /var/log/kibana #129

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Conversation

chewi
Copy link

@chewi chewi commented May 2, 2017

/etc/sv/kibana/log/main is a very odd place to write logs. Although the runit manual mentions ./main as an example, the runit cookbook uses /var/log/<service> if you enable the default logger. The log template in this cookbook is otherwise identical to the default so we may as well remove it.

We were spammed with email and Jabber messages every time someone clicked something in Kibana after turning our OSSEC syscheck on. We will have to ignore /etc/sv anyway because of other runit files but logs really shouldn't go here.

/etc/sv/kibana/log/main is a very odd place to write logs. Although
the runit manual mentions ./main as an example, the runit cookbook
uses /var/log/<service> if you enable the default logger. The log
template in this cookbook is otherwise identical to the default so we
may as well remove it.
@martinb3 martinb3 self-assigned this May 2, 2017
@chewi
Copy link
Author

chewi commented Jun 1, 2017

I just noticed that the elkstack cookbook duplicates much of the install recipe and I don't have time to find out why but the default_logger true line will also be required there if this gets merged.

@martinb3
Copy link
Collaborator

martinb3 commented Jun 1, 2017

This looks like a breaking change for folks using the cookbook. Unless you think it's a bug?

@chewi
Copy link
Author

chewi commented Jun 1, 2017

The removal of the template does break the elkstack cookbook as it stands. Other than that, it doesn't have a big impact. New logs just get written somewhere else.

chewi added a commit to yakara-ltd/elkstack that referenced this pull request Jun 1, 2017
@martinb3 martinb3 removed their assignment Dec 20, 2018
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants