search

airbus-cyber / graylog-plugin-alert-wizard

Alert Wizard plugin for Graylog to manage the alert rules
Other
46 stars 7 forks source link

Improve error message when an error happens while importing rules #30

Open frantz45 opened 3 years ago

frantz45 commented 3 years ago

Graylog returns an http error 500 when I try to import an "AND" or a "THEN" rule.

TiNico22 commented 3 years ago

@frantz45 can you confirm this issue is still relevant and present in latest version 3.3.0

frantz45 commented 3 years ago

The issue only happens when you try to import an already existing rule and the Import strategy is set to "Don't import". It happens with all rule types. I don't remember what was the original issue :( So with 3.3.0 there is no bug. However the error message is not clear, it only says: "Importing alert rules failed with status: cannot PUT https://graylog.../import (500)". And the response JSON is also empty.

TiNico22 commented 3 years ago

ok, then it's a kind of visual error msg enhancement to avoid confusion.