search

seanthegeek / graylog-fortigate-syslog-pipeline

Converts FortiGate syslog fields to the correct data type and removes unnecessary fields
Apache License 2.0
2 stars 2 forks source link

Error installing content pack pipeline in Graylog 5.2.6 #2

Open israelzitu opened 5 months ago

israelzitu commented 5 months ago

Hello. I have an error when installing graylog-fortigate-syslog-pipeline on Graylog 5.2.6. I can normally upload version 1.0.5-rev7 (and earlier) but when I click on Install it gives me the error: Installing content pack failed with status: FetchError: There was an error fetching a resource: Internal Server Error. Additional information: Failed to install content pack <c3c6366b-0e10-41d7-91de-d54d8b9694b0/7>. Could not install content pack with ID: c3c6366b-0e10-41d7-91de-d54d8b9694b0

I already have the FortiGate syslog content pack installed in version 27 with the 02 streams and dashboard working normally, I just can't install the pipeline content pack.

israelzitu commented 5 months ago

Good night. I was able to identify the error through server.log. There were 02 streams named FortiGate Syslog, one of them was redirecting to Dashboard and the other had probably been created manually. When trying to install the pipeline content, it would get the error org.graylog2.contentpacks.exceptions.ContentPackException: Multiple Streams with title FortiGate Syslog exist! It's perfectly functional now with just the stream created by the content pack.