Comments (15)
Yep, my bad--working on a fix for this right now. In the mean-time, you can
use "Schedule Query" instead and choose the connector "Send to email." I will
have a fix posted by the end of the day.
Original comment by [email protected]
on 23 Feb 2012 at 5:39
- Added labels: Priority-High
- Removed labels: Priority-Medium
from enterprise-log-search-and-archive.
Ok, just put this commit in to fix this. The menu is now streamlined to
provide alert and schedule in the same dialog and defaults to alerting.
Original comment by [email protected]
on 23 Feb 2012 at 6:56
- Changed state: Fixed
- Added labels: ****
- Removed labels: ****
from enterprise-log-search-and-archive.
OK, I fill check it out.
Original comment by [email protected]
on 23 Feb 2012 at 7:14
- Added labels: ****
- Removed labels: ****
from enterprise-log-search-and-archive.
One thing here. I just tried update_from_svn.sh and got a message that it is
now deprecated and to use install.sh node update. That is fine but I am
running into the same issue as using the update_from_svn.sh script, which is
that elsa.conf is overwritten and since I am using a custom port for syslogs
being forwarded, it means I have to remember to udpate this file every time I
update.
Can this be changed somehow to make note of changes and alert the user or to
protect the file or to show a diff and allow for interactive update?
Original comment by [email protected]
on 23 Feb 2012 at 7:20
- Added labels: ****
- Removed labels: ****
from enterprise-log-search-and-archive.
That's a good suggestion. Can you quick issue a feature-request bug for that?
In the meantime, can you confirm that your alert issue is fixed?
Original comment by [email protected]
on 23 Feb 2012 at 8:15
- Added labels: ****
- Removed labels: ****
from enterprise-log-search-and-archive.
It is not. I still get the same error now when I try to schedule and alert.
Invalid args, missing arg: connector
Original comment by [email protected]
on 23 Feb 2012 at 9:44
- Added labels: ****
- Removed labels: ****
from enterprise-log-search-and-archive.
You ran install.sh web update? If you're running the latest code, its' not
possible to get that error message, so either something is cached in your
browser or the code didn't update.
Original comment by [email protected]
on 23 Feb 2012 at 10:42
- Added labels: ****
- Removed labels: ****
from enterprise-log-search-and-archive.
Yes, I ran that at the time.
I just ran through the install.sh node update and install.sh web update today
and tried again to run the alert. This time I get the following error after I
choose the frequency and hit OK.
DBD::mysql::st execute failed: Unknown column 'connector' in 'field list'
QUERY: INSERT INTO query_schedule (uid, query, frequency, start, end,
connector, params, last_alert, alert_threshold) VALUES (?, (SELECT query FROM
query_log WHERE qid=?), ?, ?, ?, ?, ?, "1970-01-01 00:00:00", ?) at
/usr/local/elsa/web/lib/API.pm line 210 API::_dbh_error_handler('DBD::mysql::st
execute failed: Unknown column \'connector\' i...',
'DBI::st=HASH(0x2b0d7a6f0ee0)', 'undef') called at
/usr/local/elsa/web/lib/API.pm line 1602
API::schedule_query('API=HASH(0x2b0d78507260)', 'HASH(0x2b0d78174e90)') called
at /usr/local/elsa/web/lib/Web/Query.pm line 30 eval {...} called at
/usr/local/elsa/web/lib/Web/Query.pm line 28
Web::Query::call('Web::Query=HASH(0x2b0d7a613b10)', 'HASH(0x2b0d78405900)')
called at /usr/lib/perl5/site_perl/5.8.8/Plack/Component.pm line 39
Plack::Component::__ANON__('HASH(0x2b0d78405900)') called at
/usr/lib/perl5/site_perl/5.8.8/Plack/App/URLMap.pm line 71
Plack::App::URLMap::call('Plack::App::URLMap=HASH(0x2b0d7a5bfba0)',
'HASH(0x2b0d78405900)') called at
/usr/lib/perl5/site_perl/5.8.8/Plack/Component.pm line 39
Plack::Component::__ANON__('HASH(0x2b0d78405900)') called at
/usr/lib/perl5/site_perl/5.8.8/Plack/Middleware/Session.pm line 52
Plack::Middleware::Session::call('Plack::Middleware::Session=HASH(0x2b0d7a614550
)', 'HASH(0x2b0d78405900)') called at
/usr/lib/perl5/site_perl/5.8.8/Plack/Component.pm line 39
Plack::Component::__ANON__('HASH(0x2b0d78405900)') called at
/usr/lib/perl5/site_perl/5.8.8/Plack/Middleware/CrossOrigin.pm line 115
Plack::Middleware::CrossOrigin::call('Plack::Middleware::CrossOrigin=HASH(0x2b0d
7a65a810)', 'HASH(0x2b0d78405900)') called at
/usr/lib/perl5/site_perl/5.8.8/Plack/Component.pm line 39
Plack::Component::__ANON__('HASH(0x2b0d78405900)') called at
/usr/lib/perl5/site_perl/5.8.8/Plack/Middleware/Static.pm line 18
Plack::Middleware::Static::call('Plack::Middleware::Static=HASH(0x2b0d7a65aa80)'
, 'HASH(0x2b0d78405900)') called at
/usr/lib/perl5/site_perl/5.8.8/Plack/Component.pm line 39
Plack::Component::__ANON__('HASH(0x2b0d78405900)') called at
/usr/lib/perl5/site_perl/5.8.8/Plack/Handler/Apache2.pm line 66
Plack::Handler::Apache2::call_app('Plack::Handler::Apache2',
'Apache2::RequestRec=SCALAR(0x2b0d70ac01f0)', 'CODE(0x2b0d7a65aa60)') called at
/usr/lib/perl5/site_perl/5.8.8/Plack/Handler/Apache2.pm line 91
Plack::Handler::Apache2::handler('Apache2::RequestRec=SCALAR(0x2b0d70ac01f0)')
called at -e line 0 eval {...} called at -e line 0
Original comment by [email protected]
on 14 Mar 2012 at 8:30
- Added labels: ****
- Removed labels: ****
from enterprise-log-search-and-archive.
Looks like the schema updates didn't work in the install.sh web update command.
Try manually doing the following queries in elsa_web:
ALTER TABLE query_schedule DROP COLUMN action_params
ALTER TABLE query_schedule DROP FOREIGN KEY `query_schedule_ibfk_2`
ALTER TABLE query_schedule DROP COLUMN action_id
ALTER TABLE query_schedule ADD COLUMN connector VARCHAR(255)
ALTER TABLE query_schedule ADD COLUMN params VARCHAR(8000)
Original comment by [email protected]
on 14 Mar 2012 at 8:42
- Added labels: ****
- Removed labels: ****
from enterprise-log-search-and-archive.
Well, looks like a bit bigger issue than the schema update. I am missing the
query_schedule table entirely. I going to check the elsa directories for the
mysql schema and see if it is in there. If so, I will create the table. I
will let you know the outcome.
Original comment by [email protected]
on 14 Mar 2012 at 9:52
- Added labels: ****
- Removed labels: ****
from enterprise-log-search-and-archive.
Nevermind. The tables were there. I was looking in syslog rather than
elsa_web. I have applied the schema updates and will see if the query now
works.
Original comment by [email protected]
on 14 Mar 2012 at 10:01
- Added labels: ****
- Removed labels: ****
from enterprise-log-search-and-archive.
Ok, now I can schedule an alert and can see the scheduled queries. Good
progress so far.
Thanks.
Original comment by [email protected]
on 14 Mar 2012 at 10:02
- Added labels: ****
- Removed labels: ****
from enterprise-log-search-and-archive.
OK, the next issue has come up. I can see the schedule tasks but action is set
to "undefined". I try to set it to Email and I get a pop-up error saying
"Invalid arg: action". The same pop for Create Ticket and Save.
Original comment by [email protected]
on 14 Mar 2012 at 10:11
- Added labels: ****
- Removed labels: ****
from enterprise-log-search-and-archive.
The actions table is empty.
Original comment by [email protected]
on 14 Mar 2012 at 10:21
- Added labels: ****
- Removed labels: ****
from enterprise-log-search-and-archive.
Ok, that means that for whatever reason, the install.sh web update didn't work
because the code you are running is old. Can you run again and check for any
problems?
Original comment by [email protected]
on 15 Mar 2012 at 2:32
- Added labels: ****
- Removed labels: ****
from enterprise-log-search-and-archive.
Related Issues (20)
- Upgrade Fails HOT 1
- cannot create any dashboards HOT 1
- Valid grep regex misses
- Several Barracuda Spam & Virus Firewall Issues HOT 2
- Front End shows ELSA as title and a blank page after a new install HOT 1
- System Dashboard (Query and Load Statistics
- Using interval to calculate the time difference between two log records
- Internal Server Error [500] with Dashboard
- line "1node(s) with ... logs..." doesn't update and offline dahsboards HOT 1
- node update failure HOT 5
- Parsing is not successful on the web interface HOT 1
- Installer fails on FreeBSD - can provide a patch unless the project is inactive
- Unable to open elsa dash board from Apache HOT 3
- distribution packaging
- lumberjack support
- Question about UNIQUE KEY for "fields" table
- Log Size Limit Problem
- Parser for BIND queries not classifying/parsing data from udp(); or log file (custom class and fields)
- The date of the "From" field is locked in a day and not advance. HOT 1
- Trouble installing ELSA correctly
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from enterprise-log-search-and-archive.