MHMDhub / enterprise-log-search-and-archive

Automatically exported from code.google.com/p/enterprise-log-search-and-archive
0 stars 0 forks source link

Add programs only adds programs and the first class but not all the others #98

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago
What steps will reproduce the problem?
1. create a file with sshd logs ( login, logout, unknown etc)
2. send to elsa
3. you should end with program inserted ( only in buffered mode), and the class 
of the first log inserted in the class program map table.

What is the expected output? What do you see instead?
   - elsa needs to detect if the class is already inserted for the sshd program, not only inserting the first one.

Original issue reported on code.google.com by dardogui...@gmail.com on 25 Feb 2013 at 9:39

GoogleCodeExporter commented 8 years ago
The program_class_map table is deprecated and no longer in use.  I will be 
removing it soon.  Are you not getting the correct program names to appear in 
the web interface?

Original comment by mchol...@gmail.com on 25 Feb 2013 at 10:17

GoogleCodeExporter commented 8 years ago
i am writing a store procedure to allow to filter by program. so in the future 
will be any way to know the relation between program and classes?

Thnks.

Original comment by dardogui...@gmail.com on 26 Feb 2013 at 10:20

GoogleCodeExporter commented 8 years ago
There's no longer any need to store that relationship as a program doesn't 
depend on a class.  That relationship is left over from an early (unreleased) 
version of ELSA that recorded such things.  It's no longer helpful so it isn't 
recorded.  Can you describe what procedure you're trying to perform?  Maybe I 
can suggest the best way to go about it.

Original comment by mchol...@gmail.com on 26 Feb 2013 at 10:39

GoogleCodeExporter commented 8 years ago
Closing due to inactivity.  Let me know if you want to continue troubleshooting.

Original comment by mchol...@gmail.com on 25 Mar 2013 at 3:00