Fluentd does not parse stacktraces

[tomgeorge]

Support ticket link: https://support.jfrog.com/s/tickets/50069000042OVyu/artifactory-fluentd-sidecar-not-parsing-stacktraces-and-sending-them-to-datadog

We have fluentd sidecars set up on our deployment in kubernetes. When artifactory has an error and outputs a stacktrace, these are not properly parsed by fluentd and sent to datadog.

2022-03-10 16:02:25 +0000 [warn]: #0 dump an error event: error_class=Fluent::Plugin::Parser::ParserError error="pattern not matched with data 'org.artifactory.security.props.auth.BadPropsAuthException: Bad authentication Key'" location=nil tag="jfrog.rt.artifactory.service" time=2022-03-10 16:02:25.612223493 +0000 record={"message"=>"org.artifactory.security.props.auth.BadPropsAuthException: Bad authentication Key"}
2022-03-10 16:02:25 +0000 [warn]: #0 dump an error event: error_class=Fluent::Plugin::Parser::ParserError error="pattern not matched with data '\tat org.artifactory.security.db.apikey.PropsAuthenticationProvider.authenticate(PropsAuthenticationProvider.java:96)'" location=nil tag="jfrog.rt.artifactory.service" time=2022-03-10 16:02:25.612224743 +0000 record={"message"=>"\tat org.artifactory.security.db.apikey.PropsAuthenticationProvider.authenticate(PropsAuthenticationProvider.java:96)"}
2022-03-10 16:02:25 +0000 [warn]: #0 dump an error event: error_class=Fluent::Plugin::Parser::ParserError error="pattern not matched with data '\tat org.artifactory.security.PasswordDecryptingManager.authenticate(PasswordDecryptingManager.java:136)'" location=nil tag="jfrog.rt.artifactory.service" time=2022-03-10 16:02:25.612225643 +0000 record={"message"=>"\tat org.artifactory.security.PasswordDecryptingManager.authenticate(PasswordDecryptingManager.java:136)"}
2022-03-10 16:02:25 +0000 [warn]: #0 dump an error event: error_class=Fluent::Plugin::Parser::ParserError error="pattern not matched with data '\tat org.artifactory.rest.resource.security.AuthDelegationHandler.authenticateCredentials(AuthDelegationHandler.java:116)'" location=nil tag="jfrog.rt.artifactory.service" time=2022-03-10 16:02:25.612226840 +0000 record={"message"=>"\tat org.artifactory.rest.resource.security.AuthDelegationHandler.authenticateCredentials(AuthDelegationHandler.java:116)"}
2022-03-10 16:02:25 +0000 [warn]: #0 dump an error event: error_class=Fluent::Plugin::Parser::ParserError error="pattern not matched with data '\tat org.artifactory.rest.resource.security.AuthDelegationHandler.handleBasicAuth(AuthDelegationHandler.java:99)'" location=nil tag="jfrog.rt.artifactory.service" time=2022-03-10 16:02:25.612227833 +0000 record={"message"=>"\tat org.artifactory.rest.resource.security.AuthDelegationHandler.handleBasicAuth(AuthDelegationHandler.java:99)"}
2022-03-10 16:02:25 +0000 [warn]: #0 dump an error event: error_class=Fluent::Plugin::Parser::ParserError error="pattern not matched with data '\tat org.artifactory.rest.resource.security.AuthDelegationHandler.handleRequest(AuthDelegationHandler.java:69)'" location=nil tag="jfrog.rt.artifactory.service" time=2022-03-10 16:02:25.612228747 +0000 record={"message"=>"\tat org.artifactory.rest.resource.security.AuthDelegationHandler.handleRequest(AuthDelegationHandler.java:69)"}
2022-03-10 16:02:25 +0000 [warn]: #0 dump an error event: error_class=Fluent::Plugin::Parser::ParserError error="pattern not matched with data '\tat org.artifactory.addon.sso.openid.OpenIdGatewayResource.auth(OpenIdGatewayResource.java:160)'" location=nil tag="jfrog.rt.artifactory.service" time=2022-03-10 16:02:25.612229745 +0000 record={"message"=>"\tat org.artifactory.addon.sso.openid.OpenIdGatewayResource.auth(OpenIdGatewayResource.java:160)"}
2022-03-10 16:02:25 +0000 [warn]: #0 dump an error event: error_class=Fluent::Plugin::Parser::ParserError error="pattern not matched with data '\tat java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)'" location=nil tag="jfrog.rt.artifactory.service" time=2022-03-10 16:02:25.612230439 +0000 record={"message"=>"\tat java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)"}
2022-03-10 16:02:25 +0000 [warn]: #0 dump an error event: error_class=Fluent::Plugin::Parser::ParserError error="pattern not matched with data '\tat java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)'" location=nil tag="jfrog.rt.artifactory.service" time=2022-03-10 16:02:25.612231101 +0000 record={"message"=>"\tat java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)"}
2022-03-10 16:02:25 +0000 [warn]: #0 dump an error event: error_class=Fluent::Plugin::Parser::ParserError error="pattern not matched with data '\tat java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)'" location=nil tag="jfrog.rt.artifactory.service" time=2022-03-10 16:02:25.612231835 +0000 record={"message"=>"\tat java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)"}
2022-03-10 16:02:25 +0000 [warn]: #0 dump an error event: error_class=Fluent::Plugin::Parser::ParserError error="pattern not matched with data '\tat java.base/java.lang.reflect.Method.invoke(Method.java:566)'" location=nil tag="jfrog.rt.artifactory.service" time=2022-03-10 16:02:25.612232568 +0000 record={"message"=>"\tat java.base/java.lang.reflect.Method.invoke(Method.java:566)"}

From the ticket I learned that there is an internal JIRA with no ETA. I wanted to open this for other community members that may be looking for this as well.

This makes us not trust the logging platform as not everything is being sent to datadog.

[tomgeorge]

Does anyone have time to look at this?

[tomgeorge]

This has been open for 6 months with no response, is anyone at JFrog maintaining this repo?

[tomgeorge]

Hey this has been open for 2 years now and nobody from JFrog has responded