Machines in cloud - definitely copr-dist-git has in /etc/rsyslog.d/rsyslog-audit.conf the line: :msg, !contains, "type=AVC" local6.* @@log01:514 which cause the errror Dec 13 08:41:37 copr-dist-git.fedorainfracloud.org rsyslogd[2243]: cannot resolve hostname 'log01': No such file or directory [v8.34.0 try http://www.rsyslog.com/e/2027 ] Dec 13 08:41:37 copr-dist-git.fedorainfracloud.org rsyslogd[2243]: action 'action 1' suspended (module 'builtin:omfwd'), next
and indeed: # host log01 Host log01 not found: 3(NXDOMAIN)
The config comes from ansible.git: roles/base/files/rsyslog/rsyslog-audit.conf
I am not sure how the routing to logXX machines are set up and what it the propper solution: do not forward the logs on machines in cloud or if to fix the routing (how?).
Since we do not offer log servers in the cloud, the correct fix would be to exclude that setting from cloud instances.
OK. Fixed in * 03aa9734f do not deploy rsyslog-audit.conf in cloud environment
Hmm, I cannot close the issue myself, feel free to close it.
Metadata Update from @smooge: - Issue close_status updated to: Fixed - Issue status updated to: Closed (was: Open)
Login to comment on this ticket.