Skip to content

[action] [PR:19491] [LA] Add LA ignore for 'auditd queue full reporting limit reached' message#23399

Merged
mssonicbld merged 1 commit intosonic-net:202511from
mssonicbld:cherry/202511/19491
Apr 1, 2026
Merged

[action] [PR:19491] [LA] Add LA ignore for 'auditd queue full reporting limit reached' message#23399
mssonicbld merged 1 commit intosonic-net:202511from
mssonicbld:cherry/202511/19491

Conversation

@mssonicbld
Copy link
Copy Markdown
Collaborator

Description of PR

Summary:
Fixes #19347 Enhancement: Log Analyzer should add the pattern of "auditd queue full reporting limit reached" from test_tc1_aaa_suite

Type of change

  • Bug fix
  • Testbed and Framework(new/improvement)
  • New Test case
  • Skipped for non-supported platforms
  • Test case improvement

Back port request

  • 202205
  • 202305
  • 202311
  • 202405
  • 202411
  • 202505

Approach

What is the motivation for this PR?

To eliminate test failure when such messages are in DUT syslog:

Match Messages:
2025 May 11 02:55:58.050391 dut ERR auditd[618]: queue to plugins is full - dropping event
2025 May 11 02:55:58.219484 dut ERR auditd[618]: queue to plugins is full - dropping event
2025 May 11 02:55:58.244281 dut ERR auditd[618]: message repeated 3 times: [ queue to plugins is full - dropping event]
2025 May 11 02:55:58.244402 dut ERR auditd[618]: auditd queue full reporting limit reached - ending dropped event notifications

How did you do it?

Add the regex to the ansible/roles/test/files/tools/loganalyzer/loganalyzer_common_ignore.txt ignore list file.

How did you verify/test it?

Run the sonic-mgmt/tests/generic_config_updater/test_aaa.py::test_tc1_aaa_suite test.

Any platform specific information?

Supported testbed topology if it's a new test case?

Documentation

@mssonicbld
Copy link
Copy Markdown
Collaborator Author

Original PR: #19491

@mssonicbld
Copy link
Copy Markdown
Collaborator Author

/azp run

@azure-pipelines
Copy link
Copy Markdown

Azure Pipelines successfully started running 1 pipeline(s).

@vhlushko-cisco
Copy link
Copy Markdown
Contributor

@mssonicbld @ZhaohuiS @wangxin @xwjiang-ms
could you please restart the checks - the failure has nothing to do with my changes

@mssonicbld mssonicbld merged commit 27c1546 into sonic-net:202511 Apr 1, 2026
16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants