Closed cwiechmann closed 3 years ago
For the records: The JMS-Property filter in the API-Gateway Traffic-Monitor based on Elasticsearch will work a bit differently due to the way how Elasticsearch is indexing the data. The recvHeader
or sentHeader
of a JMS-Request are stored as "text" in Elasticsearch using the standard text tokenizer. This tokenizer splits up the given text based on whitespaces, tabs, ... and will ignore all special characters.
So, each word of this text is saved into the index for the field recvHeader:
Based on that, you can query for documents containing a specific word in the recvHeader. BUT, the relation between the headerName (e.g. process_id) and headerValue (e.g. JOHNTXM2JS) get lost.
For example the following filter:
Will turn into the following Elasticsearch query:
"match": {
"recvHeader": {
"query": "process_id JOHNTXM2JS",
"operator": "and"
}
}
And returns the expected result as the document recvHeader contained both words.
But, also this filter will return the same result: as the recvHeader contains the words process_id AND BDID.
Support for JMS has been added.
User story It should be possible to use the API-Gateway Traffic-Monitor also for JMS-Traffic
Additional context For the JMS-Traffic-Search data must be returned as given in the example below:
Example OpenTraffic-Events, which are structured in the same way as for HTTPS:
Transaction-Element - Leg 0:
Transaction-Summary: