Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Logstash syslog parse broken in Docker 1.11+ #790

Closed
gisjedi opened this issue Mar 31, 2017 · 1 comment
Closed

Logstash syslog parse broken in Docker 1.11+ #790

gisjedi opened this issue Mar 31, 2017 · 1 comment

Comments

@gisjedi
Copy link
Contributor

gisjedi commented Mar 31, 2017

Our logstash syslog parsing is broken as of Docker 1.11 due to a change to use RFC5424. We need to address this in a backwards compatible way within our DockerParams log-opts. Logstash does not have a syslog plugin that supports RFC5424, so we either need to continue on for the foreseeable future with RFC3164 or use a different logging driver.

The associated Docker change can be found here: moby/moby#20121

@gisjedi
Copy link
Contributor Author

gisjedi commented Mar 31, 2017

This has gone unnoticed for awhile due to our production instances of Scale using Docker 1.10.x.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants