search

patschi / parsedmarc-dockerized

Dockerized self-initializing parsedmarc docker stack for lazy people
GNU General Public License v3.0
69 stars 19 forks source link

Field Error after install #21

Open servebeer opened 4 months ago

servebeer commented 4 months ago

I just did a clean install and when I go to the web site, there are no graphics. Every box has an error that says: "[esaggs] > The field "message_count" associated with this object no longer exists in the index pattern. Please use another field.

mosheg91 commented 4 months ago

Same here

patschi commented 4 months ago

This typically means that no data has been imported by parsedmarc in elasticsearch yet. See github.com/domainaware/parsedmarc/issues/268 for reference.

For example, debug logs from parsedmarc will indicate that indices will be only created upon saving a report to elasticsearch:

    INFO:__init__.py:1019:Parsing mail from postmaster@example.com on 2020-09-19 23:04:13+00:00
    INFO:elastic.py:364:Saving aggregate report to Elasticsearch
   DEBUG:elastic.py:284:Creating Elasticsearch index: dmarc_aggregate-2020-09-17

I was able to reproduce exactly this on a new setup. Hence, not a bug and something's wrong during parsedmarc runs. Make sure to enable debug logging and investigate the parsedmarc logs further please.

patschi commented 4 months ago

You can see logs e.g. via docker logs -f parsedmarc-dockerized-parsedmarc-1 and see what parsedmarc is reporting. If no error is shown, you might want to debug = False and silent = False in the config.ini file for further information.