The rsyslog configuration defined in the mediawiki chart uses a fairly restrictive filter on programname when defining UDP log shipping rules. We should consider relaxing that (see TODO), lest it bite us when PHP 9 becomes a thing.
Original description
While looking into T384335: Move rsyslog-generated mediawiki logs within k8s to their own kafka topics I noticed the following in charts/mediawiki/templates/rsyslog/configmap.yaml.tpl:
input(type="imudp" port="10514" address="{{ .Values.mw.logging.allowed_address }}" ruleset="udp_localhost_to_kafka")
# For messages generated by php-wmerrors, also ship them to udp2log
# Emulate MediaWiki's wfDebugLog / wfErrorLog format
template(name="MediaWiki" type="string" string="%programname% %timegenerated% %HOSTNAME%: %msg%\n")
if ($programname startswith 'php7.') then {
action(type="omfwd"
Target={{ (splitList ":" .Values.mw.logging.udp2log_hostport) | first | quote }}
Port={{ (splitList ":" .Values.mw.logging.udp2log_hostport) | last | quote }}
Protocol="udp"
Name="MediaWiki"
{{- if .Values.mw.logging.udp2log_ratelimit_interval }}
RateLimit.Interval={{ .Values.mw.logging.udp2log_ratelimit_interval | default 1 | quote }}
RateLimit.Burst={{ .Values.mw.logging.udp2log_ratelimit_burst | default 100 | quote }}
{{- end }}
)
}Which I'm assuming will need adaptation for php8