Reporter errors "field value missing (CVE_2021_44228::c$http$uri)"

[dwdixon]

I installed this package and I'm seeing some of these crop up in reporter.log and wanted to let you all know. It may have been a transient burst of these errors (I haven't seen any in a while) but I nonetheless had them occur and our checks to the custom scripts API endpoint in our monitoring seemed to not like it at all, seems worth looking into. I saw about 51 of these events in reporter.log within a 1 hour timeframe after initially loading the bundle with this package included.

{"_path":"reporter","_system_name":"redacted","_write_ts":"2021-12-15T22:53:03.090118Z","ts":"2021-12-15T22:53:03.090118Z","level":"Reporter::ERROR","message":"field value missing (CVE_2021_44228::c$http$uri)","location":"/opt/bro/share/zeek/site/packages/customer-bundle/packages/./cve-2021-44228/./CVE_2021_44228.zeek, line 111"}

[dwdixon]

Just leaving an update that I am in fact seeing more occurrences of these errors which is again tripping the Custom Packages service status to red and is stating "Stopped due to script errors".

[benjeems]

Thank you @dwdixon , confirmed and being fixed @ynadji FYI

[dwdixon]

@benjeems @ynadji Thanks so much for the quick fix, I pulled the new version with the fix and it seems to have made the custom scripts monitoring happy once again etc.

[ynadji]

Great! Thanks for reporting. Please open issues for any other problems you see.