Werk #18360: OTel: Enable octet counting for syslog exporter to prevent pseudo events in EC

Component

Checks & agents

Title

OTel: Enable octet counting for syslog exporter to prevent pseudo events in EC

Date

Oct 8, 2025

Level

Trivial Change

Class

Bug Fix

Compatibility

Compatible - no manual interaction needed

Checkmk versions & editions

2.5.0b1 Not yet released	Checkmk Cloud (CCE), Checkmk MSP (CME)
2.4.0p14 Not yet released	Checkmk Cloud (CCE), Checkmk MSP (CME)

Previously, the Event Console (EC) could generate pseudo events when processing log data forwarded by the site collector. This occurred because the collector’s syslog exporter did not have octet counting enabled, preventing the EC from correctly separating individual log entries.

To fix this, the site collector’s syslog exporter now has exporters.syslog.enable_octet_counting set to true by default. This ensures that only real log entries are forwarded and processed, eliminating pseudo or merged events in the EC.

To the list of all Werks