No logs from debian 12

[burner1024]

Description

No logs from a debian 12 server in the account.

From what I see on other servers (Ubuntu), logs are supposed to be forwarded by fluent-bit, however it's not present on debian.

Steps to Reproduce

NEW_RELIC_API_KEY=NRAK-* NEW_RELIC_ACCOUNT_ID=* /usr/local/bin/newrelic install -y -n logs-integration --tag nr_deployed_by:ansible-install --debug

Expected Behavior

Get logs from the server into account.

Relevant Logs / Console output

✔ Installing Logs Integration
   Installed 
DEBUG Done executing and validating with progress for recipe name logs-integration. 
DEBUG Super agent process not found.               
DEBUG Preparing bundle                             
DEBUG bundling additional bundle                   
DEBUG recipes in list 1                            
DEBUG Adding bundle recipe:logs-integration status:[{AVAILABLE}] dependencies:[infrastructure-agent-installer] 
DEBUG Additional Targeted bundle recipes:{ADDITIONALTARGETED [{logs-integration [{AVAILABLE}]}]} 
DEBUG recipe event                                 
DEBUG performing request                            method=POST url="https://api.newrelic.com/graphql"
DEBUG Done installing.                             
DEBUG completed                                    
DEBUG final installation statuses updated          

  New Relic installation complete 

  --------------------
  Installation Summary

  ✔  Infrastructure Agent  (installed)  
  ✔  Logs Integration  (installed) 

Your Environment

lsb_release -a
No LSB modules are available.
Distributor ID:	Debian
Description:	Debian GNU/Linux 12 (bookworm)
Release:	12
Codename:	bookworm

ps axuww | grep fluent
root     3073739  0.0  0.0   6332  2304 pts/1    S+   08:34   0:00 grep fluent

uname -a
Linux XXX 6.8.12-1-pve #1 SMP PREEMPT_DYNAMIC PMX 6.8.12-1 (2024-08-05T16:17Z) x86_64 GNU/Linux

Additional context

[Nandu-pns]

Hi @burner1024, Thanks for letting us know about this! I took a look on a Debian 12 instance like yours, and log forwarding seems to be working fine for me – I can see the logs in the New Relic account.

However, I noticed something in the output of ps axuww | grep fluent you shared: it doesn't look like Fluent Bit is running. Could you check if this is still the case with the latest releases? Let us know if you're still seeing the same issue. Thanks!

[burner1024]

TASK [newrelic.newrelic_install : Report complete installs] ************************************************************************************************************************************************
ok: [node1] => {}

MSG:

{'status': 'COMPLETE', 'node': 'node1', 'summary': ['  Installation Summary', '', '  ✔  Infrastructure Agent  (installed)  ', '  ✔  Logs Integration  (installed)  ', '', '  View your data at the link below:', '  ⮕  https://onenr.io/0yw4qK4zgR3', '', '  View your logs at the link below:', '  ⮕  https://onenr.io/0oR8PxpJ6RG', '', '  --------------------']}

ps axuw | grep fluent
root     1381855  0.0  0.0   6332  2176 pts/1    S+   11:50   0:00 grep fluent

Even apt repo isn't working anymore.

apt update
Hit:1 http://mirror.hetzner.com/debian/packages bookworm InRelease
Hit:2 http://mirror.hetzner.com/debian/packages bookworm-updates InRelease                                                                                                                                 
Hit:3 http://mirror.hetzner.com/debian/security bookworm-security InRelease                                                                                                                                
Hit:5 http://deb.debian.org/debian bookworm InRelease                                                                                                                                                      
Hit:6 http://security.debian.org/debian-security bookworm-security InRelease                                                                                                                        
Hit:7 http://deb.debian.org/debian bookworm-updates InRelease                                                                                                                                       
Hit:8 http://download.proxmox.com/debian/pve bookworm InRelease                                                                                                               
Hit:9 https://download.newrelic.com/infrastructure_agent/linux/apt bookworm InRelease                                                                              
Hit:10 https://download.docker.com/linux/debian bookworm InRelease                                                                                                 
Ign:4 https://apt.newrelic.com/debian newrelic InRelease                 
Hit:11 https://apt.newrelic.com/debian newrelic Release
Err:12 http://apt.newrelic.com/debian newrelic Release.gpg
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY B31B29E5548C16BF
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
89 packages can be upgraded. Run 'apt list --upgradable' to see them.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://apt.newrelic.com/debian newrelic Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY B31B29E5548C16BF
W: Failed to fetch http://apt.newrelic.com/debian/dists/newrelic/Release.gpg  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY B31B29E5548C16BF
W: Some index files failed to download. They have been ignored, or old ones used instead.

[Nandu-pns]

Hi @burner1024 - Could you please confirm if you’re using ansible playbook to install the logs integration ? The command you shared seems to target only logs-integration (-n logs-integration). Ideally, this would likely fail because the logs integration is dependent on the infrastructure agent. I even tried this myself (see attached failure) and had to include the infrastructure agent in the target for it to work. Interestingly, I haven't encountered any of the issue you've reported above, I've tried on different Debian 12 instances (For ex - 2024 and 2025 versions).

To help us troubleshoot further, could you please share the complete debug logs (redacting any sensitive information)? You might find the log path in the console output as below. Thanks!

ok: [localhost] => {
    "msg": "Logs will be saved on host at /tmp/newrelic-cli-debug.log"
}

Tests performed on different Debian 12 instances below:

"summary": [
            "  Installation Summary",
            "",
            "  ✔  Infrastructure Agent  (installed)  ",
            "  ✔  Logs Integration  (installed)  ",
            "",
            "  View your data at the link below:",
            "  ⮕  https://onenr.io/xxxxx”,
            "",
            "  View your logs at the link below:",
            "  ⮕  https://onenr.io/xxxxx”,
            "",
            "  --------------------",
            ""
        ]
    }
}

TASK [newrelic.newrelic_install : Report incomplete installs] ***************************************************************************************************************************************************************************************
skipping: [localhost]
[WARNING]: Collection ansible.utils does not support Ansible version 2.14.18

PLAY RECAP ******************************************************************************************************************************************************************************************************************************************
localhost                  : ok=31   changed=3    unreachable=0    failed=0    skipped=24   rescued=0    ignored=0   

admin@ip-xxxx:~/tmp$ ps axuw | grep fluent
root        xxxx  0.1  4.7 xxxx xxxx ?        Sl   14:48   0:00 /opt/fluent-bit/bin/fluent-bit -c /tmp/fb/nr_fb_configxxxx -e /var/db/newrelic-infra/newrelic-integrations/logging/out_newrelic.so -R /var/db/newrelic-infra/newrelic-integrations/logging/parsers.conf
admin       xxxx  0.0  0.2   xxxx  xxxx pts/0    S+   14:48   0:00 grep fluent

admin@ip-xxxx:~/tmp$ lsb_release -a
No LSB modules are available.
Distributor ID:	Debian
Description:	Debian GNU/Linux 12 (bookworm)
Release:	12
Codename:	bookworm

admin@ip-xxxx:~/tmp$ uname -a
Linux ip-xxxx 6.1.0-28-cloud-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.119-1 (2024-11-22) x86_64 GNU/Linux

admin@ip-xxxx:~/tmp$ lsb_release -a
No Lob modules are avalrable.
Distributor ID: Debian
Description:  Debian GNU/Linux 12 (bookworm)
Release:  12
Codename:  bookworm

admin@ip-xxxx:~/tmp$ uname -a
Linux ip-xxxx 6.1.0-32-cloud-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.129-1 (2025-03-06) x86_64 GNU/Linux

[burner1024]

Initially I used Ansible, then just ran the same command manually to debug.
The server is Proxmox.

Linux node1 6.8.12-5-pve #1 SMP PREEMPT_DYNAMIC PMX 6.8.12-5 (2024-12-03T10:26Z) x86_64 GNU/Linux
$ lsb_release -a
No LSB modules are available.
Distributor ID: Debian
Description:    Debian GNU/Linux 12 (bookworm)
Release:        12
Codename:       bookworm

==> Installing Logs Integration
DEBUG preparing recipe                             
DEBUG recipe event                                 
DEBUG performing request                            method=POST url="https://api.newrelic.com/graphql"
DEBUG executing recipe logs-integration            
DEBUG no validationUrl defined, skipping           
DEBUG no validationIntegration defined, skipping   
DEBUG no validationNRQL defined, skipping          
DEBUG recipe event                                 
DEBUG performing request                            method=POST url="https://api.newrelic.com/graphql"
✔ Installing Logs Integration
   Installed 
DEBUG Done executing and validating with progress for recipe name logs-integration. 
DEBUG Agent Control process not found.             
DEBUG Preparing bundle                             
DEBUG bundling additional bundle                   
DEBUG recipes in list 1                            
DEBUG Adding bundle recipe:logs-integration status:[{AVAILABLE}] dependencies:[infrastructure-agent-installer] 
DEBUG Additional Targeted bundle recipes:{ADDITIONALTARGETED [{logs-integration [{AVAILABLE}]}]} 
DEBUG recipe event                                 
DEBUG performing request                            method=POST url="https://api.newrelic.com/graphql"
DEBUG Done installing.                             
DEBUG completed                                    
DEBUG final installation statuses updated          

  New Relic installation complete 

  --------------------
  Installation Summary

  ✔  Infrastructure Agent  (installed)  
  ✔  Logs Integration  (installed)  

  View your data at the link below:
  ⮕  https://onenr.io/0qQaaVenpQ1

  View your logs at the link below:
  ⮕  https://onenr.io/0nQx0ord3QV

  --------------------

DEBUG performing request                            method=POST url="https://api.newrelic.com/graphql"