[nri-bundle:5.0.26] Logs not parsing as CRI but parsing as Docker about helm-charts

[jsubirat]

Hi @JPrice904 , thank you for informing us of this. Are you perhaps overriding the fluentBit.config.inputs value in values.yml? The INPUT block that we now generate use the multiline.parser instead of parser, which accepts multiple parsers and attempts each one in order. This ensures that the parsing is done even if the value of fluentBit.criEnabled is wrong. But if you override the fluentBit.config.inputs block and are still using parser instead of multiline.parser, you'll face the problem you described in the ticket.

[jsubirat]

Hi @JPrice904 , we proceed to close this ticket due to inactivity. Please come back to us if you experience any other issue. Thanks a lot for your feedback!

[khauser]

Hi @jsubirat,

I do have the same problem and I already tried using extraInputs, but that doesn't help. Logs are still not parsed after update to nri-bundle 5.0.46.

Here is our newrelic yaml file:

global:
  lowDataMode: true
newrelic-infrastructure:
  privileged: true

ksm:
  enabled: true
  podAnnotations:
    fluentbit.io/exclude: "true"
kubeEvents:
  enabled: true
  podAnnotations:
    fluentbit.io/exclude: "true"
newrelic-prometheus-agent:
  enabled: true
  podAnnotations:
    fluentbit.io/exclude: "true"
  lowDataMode: true
  config:
    kubernetes:
      integrations_filter:
        enabled: false
logging:
  enabled: true
newrelic-logging:
  podAnnotations:
    fluentbit.io/exclude: "true"
  lowDataMode: true
  fluentBit:
    criEnabled: true
    k8sLoggingExclude: "On"
    config:
      extraInputs: |
        [INPUT]
            Name              tail
            Tag               kube.*
            Path              ${PATH}
            Exclude_Path      /var/log/containers/*_kube-system_*.log, /var/log/containers/*_flux-system_*.log, /var/log/containers/*_newrelic_*.log
            Parser            ${LOG_PARSER}
            DB                ${FB_DB}
            Mem_Buf_Limit     7MB
            Skip_Long_Lines   On
            Refresh_Interval  10
            Buffer_Chunk_Size 64k
            Buffer_Max_Size   64k

What could be the problem here?

Best,
Karsten