# log aggregation not working after 10 minutes

**URL:** <https://forum.ansible.com/t/log-aggregation-not-working-after-10-minutes/38093>\
**Category:** AWX Project\
**Tags:** awx, kubernetes\
**Created:** [June 13, 2023, 10:41am UTC](https://forum.ansible.com/t/log-aggregation-not-working-after-10-minutes/38093 "2023-06-13T10:41:35Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![AWX\_Project2](https://avatars.discourse-cdn.com/v4/letter/a/858c86/32.png) [@AWX\_Project2](https://forum.ansible.com/u/AWX_Project2)\
**Post date:** [June 13, 2023, 10:41am UTC](https://forum.ansible.com/t/log-aggregation-not-working-after-10-minutes/38093/1 "2023-06-13T10:41:35Z")

</div>

Hi,  
I have AWX 19.3.0 deployed on EKS k8s cluster and I have configured ELK as log aggregator, So far so good but the issue I’m facing is for 10 mins logs are pushed then it stops. Again if I made some changes to config and save it pushes logs but for 10 mins only then it stops again. Is this a bug or known issue? What is workaround or solution for this?  
Please help! many thanks

---

<div class="post-metadata">

**Author:** ![AWX\_Project](https://avatars.discourse-cdn.com/v4/letter/a/eada6e/32.png) [@AWX\_Project](https://forum.ansible.com/u/AWX_Project)\
**Post date:** [June 14, 2023, 6:51pm UTC](https://forum.ansible.com/t/log-aggregation-not-working-after-10-minutes/38093/2 "2023-06-14T18:51:31Z")

</div>

Are you seeing any rsyslog errors in your container pods? Have you attempted this configuration on the latest version of AWX?

Thanks,

AWX Team

---

<div class="post-metadata">

**Author:** ![AWX\_Project2](https://avatars.discourse-cdn.com/v4/letter/a/858c86/32.png) [@AWX\_Project2](https://forum.ansible.com/u/AWX_Project2)\
**Post date:** [June 15, 2023, 2:45am UTC](https://forum.ansible.com/t/log-aggregation-not-working-after-10-minutes/38093/3 "2023-06-15T02:45:09Z")

</div>

No, I’m not seeing any rsyslog errors in container pods. I tried on 20.1.0 with same issue.

---

<div class="post-metadata">

**Author:** ![AWX\_Project2](https://avatars.discourse-cdn.com/v4/letter/a/858c86/32.png) [@AWX\_Project2](https://forum.ansible.com/u/AWX_Project2)\
**Post date:** [June 19, 2023, 5:45am UTC](https://forum.ansible.com/t/log-aggregation-not-working-after-10-minutes/38093/4 "2023-06-19T05:45:40Z")

</div>

Yes, I’m seeing below error:  
ERROR rsyslogd was unresponsive: OSError: [Errno 90] Message too long

Please ignore my previous email.

Thank you very much

---

<div class="post-metadata">

**Author:** ![AWX\_Project](https://avatars.discourse-cdn.com/v4/letter/a/eada6e/32.png) [@AWX\_Project](https://forum.ansible.com/u/AWX_Project)\
**Post date:** [June 21, 2023, 6:57pm UTC](https://forum.ansible.com/t/log-aggregation-not-working-after-10-minutes/38093/5 "2023-06-21T18:57:07Z")

</div>

sounds like known issue, do you mind providing details as a comment on this github issue [https://github.com/ansible/awx/issues/7278](https://github.com/ansible/awx/issues/7278)

Also, do you still get this error if you disable sending facts to the log aggregator,

In the UI, go to settings \> Logging settings

remove “system\_tracking” and “job\_events” from the list and Save.

AWX Team

---

<div class="post-metadata">

**Author:** ![AWX\_Project2](https://avatars.discourse-cdn.com/v4/letter/a/858c86/32.png) [@AWX\_Project2](https://forum.ansible.com/u/AWX_Project2)\
**Post date:** [July 3, 2023, 6:22am UTC](https://forum.ansible.com/t/log-aggregation-not-working-after-10-minutes/38093/6 "2023-07-03T06:22:31Z")

</div>

After removing “system\_tracking” and “job\_events” logging worked stable, but its not logging job logs that we need. Therefore we have added job\_events. After adding again it broke.  
What Should we do? Please help! Appreciate your response and help!

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![AWX\_Project](https://avatars.discourse-cdn.com/v4/letter/a/eada6e/32.png) [@AWX\_Project](https://forum.ansible.com/u/AWX_Project)\
**Post date:** [July 5, 2023, 6:53pm UTC](https://forum.ansible.com/t/log-aggregation-not-working-after-10-minutes/38093/7 "2023-07-05T18:53:51Z")

</div>

Hi,

Are you running multiple jobs? Are you able to narrow this down to a particular job/task in a playbook? This seems like the issue linked in our earlier comment and the workaround in that issue is to add a no\_log to the task(s) causing the issue. I’d recommend following the issue for further updates.

Thanks,

AWX Team