Systemd-entrypoint DefaultDispatcher-worker ERROR Could not define attribute view on path "/var/log/opensearch/opensearch_server.json"

Getting the same messages, once for the opensearch.log and for opensearch_server.json.
ERROR Could not define attribute view ... got access denied

It seems that it happens during the daily log rollover when the files are in locked state probably?
And yes these are the only files opensearch gets an access denied here for us.

ls -l opensearch.log opensearch_server.json
-rw-r--r-- 1 opensearch opensearch    25761 Aug 14 08:54 opensearch.log
-rw-r--r-- 1 opensearch opensearch    67733 Aug 14 08:54 opensearch_server.json

Permissions on /var/log/opensearch directory

drwxr-xr-x  2 opensearch opensearch  69632 Aug 14 00:04 opensearch

Permissions on /var/log directory

drwxrwxr-x 17 root syslog  4096 Aug 14 05:28 log
1 Like