Dashboard from imported Content Pack does not show Values

[phermsdorf]

Hi,

I've created a Content pack from one of my Graylog Systems. When importing them to other Graylog Systems everthing is working (Input, Streams have Data) and the dashboard Configuration get's imported but the Dashboard does not show Data.

When clicking on the litte Play buttons in the dashboard Widgets the corresponding Streams gets opened and show Data as expected.

Graylog server and Web version on all Systems is 1.1.4

Any ideas on this?

Thank you!

[joschi]

Could you please provide the content pack for debugging?

[edmundoa]

Hi,

Are both Graylog instances (the one where you created the content pack, and the one where it is applied) running the same version? It would also help if you could share any errors you may see in your Graylog server and web interface logs.

[phermsdorf]

Hi,

ich re-checked the versions and both systems are running graylog-web-interface v1.1.4. I also removed the content pack, streams, input and dashboard again and the reimported and activated the content pack without any log messages besides a new input was added and activated.

the content pack json is:

{
  "id" : null,
  "name" : "P4",
  "description" : "Graylog Konfiguration für P4",
  "category" : "P4",
  "inputs" : [ {
    "title" : "P4",
    "configuration" : {
      "port" : 12201,
      "bind_address" : "0.0.0.0",
      "recv_buffer_size" : 1048576
    },
    "type" : "org.graylog2.inputs.gelf.udp.GELFUDPInput",
    "global" : false,
    "extractors" : [ {
      "title" : "Kundenversion in extra Feld extrahieren",
      "type" : "REGEX",
      "configuration" : {
        "regex_value" : "^.*Kundenversion: ([A-Za-z].+[A-Za-z]).*Datenbank.*$"
      },
      "converters" : [ ],
      "order" : 0,
      "cursor_strategy" : "COPY",
      "target_field" : "customerVersion",
      "source_field" : "DB",
      "condition_type" : "NONE",
      "condition_value" : ""
    } ],
    "static_fields" : { }
  } ],
  "streams" : [ {
    "id" : "53fef5e6d5de8b5712683442",
    "title" : "P4 Client Errors",
    "description" : "",
    "disabled" : false,
    "outputs" : [ ],
    "stream_rules" : [ {
      "type" : "EXACT",
      "field" : "level",
      "value" : "3",
      "inverted" : false
    }, {
      "type" : "REGEX",
      "field" : "application",
      "value" : "(P4-Client|P4Plus-4.1)",
      "inverted" : false
    } ]
  }, {
    "id" : "53fef429d5de8b571268325a",
    "title" : "P4 Client starts",
    "description" : "",
    "disabled" : false,
    "outputs" : [ ],
    "stream_rules" : [ {
      "type" : "EXACT",
      "field" : "marker",
      "value" : "FORCE",
      "inverted" : false
    }, {
      "type" : "EXACT",
      "field" : "message",
      "value" : "Client startup with Remote Logging",
      "inverted" : false
    } ]
  }, {
    "id" : "53fef520d5de8b5712683368",
    "title" : "P4 Client Warning",
    "description" : "",
    "disabled" : false,
    "outputs" : [ ],
    "stream_rules" : [ {
      "type" : "EXACT",
      "field" : "level",
      "value" : "4",
      "inverted" : false
    }, {
      "type" : "REGEX",
      "field" : "application",
      "value" : "(P4-Client|P4Plus-4.1)",
      "inverted" : false
    }, {
      "type" : "REGEX",
      "field" : "message",
      "value" : "Field \\{.*\\} is null. Interrupting formula evaluation.",
      "inverted" : true
    }, {
      "type" : "EXACT",
      "field" : "message",
      "value" : "Function 'next' returned null. Interrupting formula evaluation.",
      "inverted" : true
    } ]
  }, {
    "id" : "5406b05ed5de8b57127093b0",
    "title" : "P4 Server",
    "description" : "Warning and Error",
    "disabled" : false,
    "outputs" : [ ],
    "stream_rules" : [ {
      "type" : "EXACT",
      "field" : "application",
      "value" : "P4-Server",
      "inverted" : false
    }, {
      "type" : "REGEX",
      "field" : "level",
      "value" : "(3|4)",
      "inverted" : false
    } ]
  } ],
  "outputs" : [ ],
  "dashboards" : [ {
    "title" : "P4",
    "description" : "P4 Dashboard",
    "dashboard_widgets" : [ {
      "description" : "Client Warnings Today",
      "type" : "STREAM_SEARCH_RESULT_COUNT",
      "configuration" : {
        "query" : "*",
        "timerange" : {
          "keyword" : "from midnight till now",
          "type" : "keyword"
        },
        "stream_id" : "53fef520d5de8b5712683368"
      },
      "col" : 1,
      "row" : 2,
      "cache_time" : 10
    }, {
      "description" : "Client Warnings Today",
      "type" : "SEARCH_RESULT_CHART",
      "configuration" : {
        "interval" : "minute",
        "query" : "*",
        "timerange" : {
          "keyword" : "from midnight till now",
          "type" : "keyword"
        },
        "stream_id" : "53fef520d5de8b5712683368"
      },
      "col" : 2,
      "row" : 2,
      "cache_time" : 10
    }, {
      "description" : "Client Errors Today",
      "type" : "STREAM_SEARCH_RESULT_COUNT",
      "configuration" : {
        "query" : "*",
        "timerange" : {
          "keyword" : "from midnight till now",
          "type" : "keyword"
        },
        "stream_id" : "53fef5e6d5de8b5712683442"
      },
      "col" : 1,
      "row" : 3,
      "cache_time" : 10
    }, {
      "description" : "Client Errors Today",
      "type" : "SEARCH_RESULT_CHART",
      "configuration" : {
        "interval" : "minute",
        "query" : "*",
        "timerange" : {
          "keyword" : "from midnight till now",
          "type" : "keyword"
        },
        "stream_id" : "53fef5e6d5de8b5712683442"
      },
      "col" : 2,
      "row" : 3,
      "cache_time" : 10
    }, {
      "description" : "Client starts Today",
      "type" : "STREAM_SEARCH_RESULT_COUNT",
      "configuration" : {
        "query" : "*",
        "timerange" : {
          "keyword" : "from midnight till now",
          "type" : "keyword"
        },
        "stream_id" : "53fef429d5de8b571268325a"
      },
      "col" : 1,
      "row" : 1,
      "cache_time" : 10
    }, {
      "description" : "P4 Server Warn&Err Today",
      "type" : "STREAM_SEARCH_RESULT_COUNT",
      "configuration" : {
        "query" : "*",
        "timerange" : {
          "keyword" : "from midnight till now",
          "type" : "keyword"
        },
        "stream_id" : "5406b05ed5de8b57127093b0"
      },
      "col" : 1,
      "row" : 4,
      "cache_time" : 10
    }, {
      "description" : "Client starts Today",
      "type" : "SEARCH_RESULT_CHART",
      "configuration" : {
        "interval" : "minute",
        "query" : "*",
        "timerange" : {
          "keyword" : "from midnight till now",
          "type" : "keyword"
        },
        "stream_id" : "53fef429d5de8b571268325a"
      },
      "col" : 2,
      "row" : 1,
      "cache_time" : 10
    }, {
      "description" : "P4 Clients: Activiti WF Engine nicht gefunden",
      "type" : "STREAM_SEARCH_RESULT_COUNT",
      "configuration" : {
        "query" : "\"Fehler: Keine Workflow Engine mit ID 2\"",
        "timerange" : {
          "keyword" : "from midnight till now",
          "type" : "keyword"
        },
        "stream_id" : "53fef5e6d5de8b5712683442"
      },
      "col" : 2,
      "row" : 4,
      "cache_time" : 10
    } ]
  } ]
}

[joschi]

@phermsdorf Thanks for reporting this bug. We've found the issue and it will be fixed in the next version of Graylog.

[phermsdorf]

@joschi great to hear!