Log Files¶

Each VOR Stream host writes its logs to the VOR Stream log directory, vor_log_directory in the inventory file (/opt/vor/log by default). A host has only the files of the services it runs. The Host column names the inventory group that runs the service.

File	Host	Written by	Holds	Rotated by
`supervisord.log`	every host	supervisord	When each service started, stopped or exited.	supervisord
`caddy.log`	every host	Caddy	Caddy's log.	supervisord
`consul.log`	every host	Consul	The Consul server's log on `consul` hosts, the Consul agent's elsewhere.	supervisord
`consul-ui.log`	`consul_ui`	Consul	The log of the Consul agent that serves the Consul UI.	supervisord
`super.log`	`super`	Super (`vor serve`)	Super's log.	supervisord
`super/playpen-upgrades_<date>_<time>.log`	`super`	Super	The playpen upgrades Super ran when it started, one file per start. `super_logs_dir` moves the directory.	nothing
`sdk_api.log`	`sdk`	SDK API (`vor serve --sdk`)	The SDK API's log.	supervisord
`compute.log`	`compute`	sshd	The log of the SSH server Super starts jobs through.	supervisord
`django/uwsgi.log`	`django`	uWSGI	One line per web request, and messages from VOR Stream's Django code.	supervisord
`django.log`	`django`	Django	Django's own warnings and errors, such as refused requests and the tracebacks of failed ones.	nothing
`django_auth.log`	`django`	Django	One line per login, logout, failed login and refused API token. See Auth Log.	nothing
`super-vault-agent.log`, `sdk-vault-agent.log`, `django-vault-agent.log`	`super`, `sdk`, `django`	Vault Agent	The log of the agent that keeps that service's Vault token.	supervisord
`vault.log`	`vault`	Vault	Vault's server log. Its audit log is elsewhere; see below.	supervisord
`postgres.log`	`postgres`	PostgreSQL	PostgreSQL's server log.	supervisord
`rabbitmq/rabbitmq.log`	`rabbitmq`	RabbitMQ	What RabbitMQ prints to its console.	supervisord
`rabbitmq/<node>.log`	`rabbitmq`	RabbitMQ	RabbitMQ's own log, named after the node, such as `[email protected]`.	nothing
`syncfusion.log`	`web`	Syncfusion service	The Syncfusion service's log.	supervisord

supervisorctl tail <service> shows the end of a file supervisord writes; see Management of Services.

Rotation¶

supervisord rotates each file it writes when the file reaches 50 MB, and keeps the last 10 as .1 to .10. Leave those files out of any logrotate configuration.

Nothing rotates the rest, so they grow until an administrator acts:

django.log and django_auth.log: let logrotate rename the file, as it does by default. Django notices on its next line and writes to a new file. With create, give the new file an owner the Django Midtier can write to, and for django_auth.log the mode 0640: create 0640 <vor_user> <vor_group>. Without create, Django makes the new file with the process's default mode, readable by every user on the host. Avoid copytruncate, which loses any line written between the copy and the truncate.
RabbitMQ's node log: use RabbitMQ's log.file.rotation settings or logrotate, as the RabbitMQ logging guide describes.
Super's playpen upgrade logs: one small file per Super start. Delete old ones when they are no longer needed.

Vault Audit Log¶

With vault_enable_audit set in the inventory file, Vault writes its audit log to vault/audit.log under the VOR Stream root (/opt/vor/vault/audit.log by default), not to the log directory. Vault does not rotate it. After logrotate renames it, run supervisorctl signal HUP vault so Vault reopens the file.