Graylog2 / graylog-plugin-pipeline-processor

[DEPRECATED] Graylog Pipeline Message Processor Plugins
https://www.graylog.org/
GNU General Public License v3.0
20 stars 15 forks source link

No information about rules errors #242

Open joschi opened 6 years ago

joschi commented 6 years ago

Problem description

Rules error indicator

While the Graylog web interface provides some information about the error rate an individual rule produces, there's no way to find out what kind of errors these are.

Neither the web interface nor the logs of Graylog provide any hints about the details of these errors nor which messages have been affected.

Steps to reproduce the problem

  1. Write a rule which produces some kind of runtime error
  2. Attach the rule to a pipeline which is attached to a stream
  3. Send messages into that stream
  4. Watch error counter for rule increase
  5. PROFIT!

Environment

inventor96 commented 5 years ago

Isn't this the purpose of the "gl2_processing_error" field?

I'd be interested in knowing how to reset that error counter...

joschi commented 5 years ago

Isn't this the purpose of the "gl2_processing_error" field?

That field only exists if the message was indexed at all.

inventor96 commented 5 years ago

That field only exists if the message was indexed at all.

Ahh, true. I didn't think about that case.