Recommended syslog logging configuration

IncusOS
1

Hallo :waving_hand:

Wanting to get the best observability possible from my IncusOS systems, i’d like to confirm something.

I currently have both of these configured

I do observe duplicate entries on the syslog side, one coming from the IncusOS logger and the other one from the core.syslog_socket through Loki.

I’d like to avoid duplicate as much as possible but also want to make sure I do not miss potential logs. Does one superseed the other ?
What would be the recommended logging configuration for IncusOS regarding syslog component ?

Cheers !

2

core.syslog_socket is used to feed Incus with OVN logs, you’re unlikely to be needing this in your scenario and it doesn’t cause Incus to relay anything, it’s just a data source for Incus to process OVN ACL messages.

There is some duplication you may see between the host syslog (from IncusOS) and the logging events you get through Loki (if you configured Incus to log remotely to Loki) but that varies based on the log level and Incus isn’t usually very verbose in what it sends to the local log.

1 Like