Standard Decision Log Output – Stdout or Stderr?

[vagrawal-nc]

Hello Team,

We are running OPA in a container and have observed that all decision logs are being generated as expected. However, in Azure, these logs are marked as "Error."

We would like to confirm how logs are exported from the OPA server. Are they being sent to Stdout or Stderr?

As per the documentation: > OPA logs to stderr, and the logging level can be configured using --log-level/-l. The default log level is info, which includes request/response information.

https://www.openpolicyagent.org/docs/latest/deployments/#:~:text=OPA%20logs%20to%20stderr%20and,to%20log%20request%2Fresponse%20information.&text=If%20the%20log%20level%20is,can%20be%20expensive%20in%20production.

We are running OPA with following command: run --server --log-level debug --set=decision_logs.console=true

Could you clarify the process for sending decision logs to Stdout to prevent all logs from being marked as "Error"?

Thanks

[charlieegan3]

The --log-level flag is used to set the types of messages that are logged, and whether the messages go to stdout or stderr.

OPA's stdout is generally reserved for data that might be piped to another program. This is not used for a server but more commands like opa eval etc.

Log messages all go to stderr.

You can see the behaviour like this:

opa run --server --log-level debug --set=decision_logs.console=true > out.log 2> error.log

You can send errors to stdout like this BUT, you will need a shell for this (so will need to).

opa run --server --log-level debug --set=decision_logs.console=true 2>&1