syslog setting does not work in keystone

[Yuhsuke Kaneyasu]

1. Enable syslog in keystone.conf
/etc/keystone/keystone.conf:

use_syslog = True

2. Modify the logging setting in keystone/logging.conf
/etc/keystone/logging.conf:

[handler_production]
class=handlers.SysLogHandler
level=ERROR
formatter=normal
args=(('[2001:2013:xx...xx]', handlers.SYSLOG_UDP_PORT), handlers.SysLogHandler.LOG_USER)
#args=(('localhost', handlers.SYSLOG_UDP_PORT), handlers.SysLogHandler.LOG_USER)

--> still the logging is written in the localhost syslog

Ref.
https://lists.launchpad.net/openstack/msg20020.html

[Davanum Srinivas (DIMS) (dims-v)]

Yuhsuke,

Does it work if you use ipv4 addresses? Is this a problem only with ipv6?

http://bugs.python.org/issue14855

-- dims

[Dolph Mathews (dolph)]

What is the value of log_config in keystone.conf?

[Yuhsuke Kaneyasu (yuskknys)]

log_config in keystone.conf is commented out and I think the default value may be used which means log_config = logging.conf.

[Yuhsuke Kaneyasu (yuskknys)]

> Dims

This seemed to happen in both IPv4 and IPv6 when I tried.

[Juan Antonio Osorio Robles (juan-osorio-robles)]

What release is this affecting? Havana or Ice House. Has this been addressed somehow?

[Yuhsuke Kaneyasu (yuskknys)]

It was Havana.

[Steven Huynh (stbven)]

Has anyone got this to work? I'm having the same issue with logging to syslog when using logging.conf

[David Stanek (dstanek)]

The use_syslog config param probably doesn't do what you are looking for. If looks like it adds a handler to the root logger that will only log the the localhost using the /dev/log UNIX domain socket. http://git.openstack.org/cgit/openstack/keystone/tree/keystone/openstack/common/log.py?h=stable/havana#n398

Is your syslog handler wired up to a logger in the config? The default config file has a production handler that uses syslog, but none of the loggers actually use it.

[Morgan Fainberg (mdrnstm)]

Marking this as "invalid". I have seen keystone successfully use the logging.conf setup to channel to remote syslog. the "use systlog" option is something we should probably look at eliminating as it doesn't seem to do what people expect.