MHMDhub / enterprise-log-search-and-archive

Automatically exported from code.google.com/p/enterprise-log-search-and-archive
0 stars 0 forks source link

patterndb test fails #165

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago
What steps will reproduce the problem?
1. /usr/local/syslog-ng/bin/pdbtool test /usr/local/elsa/node/conf/patterndb.xml

What is the expected output? What do you see instead?
I would expect to see no tests failed, instead I see many 'Wrong match' errors. 
Full log from my system is attached.

What version of the product are you using? On what operating system?
SVN r974

Please provide any additional information below.
The -p option is no longer needed for pdbtool. You may wish to update the 
documentation.

Original issue reported on code.google.com by i...@pingas.org on 16 Jul 2013 at 7:28

Attachments:

GoogleCodeExporter commented 8 years ago
"Me too," attached. Latest rev 1149 on RHEL 6.5.

Specific problem in my case is that httpry logs like the below are recorded as 
program=url class=NONE with all the | rendered as %7C.

<0>Feb  5 15:05:29 127.0.0.1 url[29292]: 
1.2.3.4|5.6.7.8|GET|www.youtube.com|/watch?v=z6kgvhG3AkI&spf=navigate|http://www
.youtube.com/results?search_query=ham%20and%20nye%20debate&sm=3|Mozilla/5.0 
(Macintosh; Intel Mac OS X 10_9_1) AppleWebKit/537.73.11 (KHTML, like Gecko) 
Version/7.0.1 Safari/537.73.11|,com,youtube.com,www.youtube.com|200||8583

Original comment by rcgra...@gmail.com on 5 Feb 2014 at 9:07

Attachments: