The date of the "From" field is locked in a day and not advance.

- What steps will reproduce the problem?

the problem was originated February 11 and dont know the causes, it may be an 
excess of logs.

What is the expected output? What do you see instead?

The date of de field "From" does not progress and i can't see the logs of later 
days to February 11.

- What version of the product are you using? On what operating system?

OS: CentOS release 6.6 (Final)
Components:
rsyslog-5.8.10-10.el6_6.x86_64
perl-5.10.1-136.el6_6.1.x86_64
perl-CPAN-1.9402-136.el6_6.1.x86_64 (and necessary modules)
mysql-server-5.1.73-3.el6_5.x86_64 (and necessary modules)
httpd-2.2.15-39.el6.centos.x86_64
sphinx-2.1.3
syslog-ng-3.4.7
Install ELSA in December 2014

- Please provide any additional information below.

            ERROR logs in February 11:
node.log:
* ERROR [2015/02/11 19:08:02] /usr/local/elsa/web/../node//Indexer.pm (1153) 
Indexer::_queue_for_indexing 20366 [undef]
Resources overlimit and no open perm index slots

            ERROR logs Today:
node.log:
* ERROR [2015/02/22 01:59:02] /usr/local/elsa/web/../node//Indexer.pm (1153) 
Indexer::_queue_for_indexing 23090 [undef]
Resources overlimit and no open perm index slots
* ERROR [2015/02/22 02:00:02] /usr/local/elsa/web/../node//Indexer.pm (959) 
Indexer::load_buffers 23099 [undef]
Buffers locked by a dead pid 23090.  Unlocking.

web.log:
* ERROR [2015/02/24 11:39:29] /usr/local/elsa/web/lib/Query/Sphinx.pm (976) 
Query::Sphinx::__ANON__ 13595 [undef]
Query error: $VAR1 = {
          'error' => 'sphinx got error $VAR1 = \'DBD::mysql::st fetchrow_hashref failed: sphinxql: syntax error, unexpected AS, expecting IDENT (or 20 other tokens) near \\\'AS _groupby, (class_id=1) AS attr_tests, 1=1 AS import_tests FROM perm_198 WHERE MATCH(\\\'((1))\\\') AND attr_tests=1 AND import_tests=1 AND class_id=1 AND timestamp>=1423677857 GROUP BY orderby ORDER BY _count  DESC LIMIT 0,1000;SHOW META\\\' at /usr/local/elsa/web/lib/SyncMysql.pm line 143.
\';
'
        };

Original issue reported on code.google.com by ivan.f...@gmail.com on 24 Feb 2015 at 12:38

Attachments:

[ELSA ISSUE.rar](https://storage.googleapis.com/google-code-attachments/enterprise-log-search-and-archive/issue-232/comment-0/ELSA ISSUE.rar)

SafeAF / enterprise-log-search-and-archive

The date of the "From" field is locked in a day and not advance. #232