Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Filebeat] Update Suricata dashboards #20394

Merged

Conversation

andrewkroh
Copy link
Member

What does this PR do?

This is a followup to #20220 to get the correct dashboard files into place.

Why is it important?

I must have messed up while exporting the dashboards in #20220 so most of my changes were missing. This fixes that.

This is a followup to elastic#20220 to get the correct dashboard files into place.
@elasticmachine
Copy link
Collaborator

Pinging @elastic/siem (Team:SIEM)

@botelastic botelastic bot added needs_team Indicates that the issue/PR needs a Team:* label and removed needs_team Indicates that the issue/PR needs a Team:* label labels Aug 3, 2020
@elasticmachine
Copy link
Collaborator

❕ Build Aborted

Either there was a build timeout or someone aborted the build.'}

Pipeline View Test View Changes Artifacts

Expand to view the summary

Build stats

  • Build Cause: [Pull request #20394 opened]

  • Start Time: 2020-08-03T03:20:47.863+0000

  • Duration: 128 min 13 sec

Test stats 🧪

Test Results
Failed 0
Passed 1883
Skipped 265
Total 2148

Log output

Expand to view the last 100 lines of log output

[2020-08-03T04:21:11.950Z]   Git commit:       48a66213fe
[2020-08-03T04:21:11.950Z]   Built:            Mon Jun 22 15:44:07 2020
[2020-08-03T04:21:11.950Z]   OS/Arch:          linux/amd64
[2020-08-03T04:21:11.950Z]   Experimental:     false
[2020-08-03T04:21:11.950Z]  containerd:
[2020-08-03T04:21:11.950Z]   Version:          1.2.13
[2020-08-03T04:21:11.950Z]   GitCommit:        7ad184331fa3e55e52b890ea95e65ba581ae3429
[2020-08-03T04:21:11.950Z]  runc:
[2020-08-03T04:21:11.950Z]   Version:          1.0.0-rc10
[2020-08-03T04:21:11.950Z]   GitCommit:        dc9208a3303feef5b3839f4323d9beb36df0a9dd
[2020-08-03T04:21:11.950Z]  docker-init:
[2020-08-03T04:21:11.950Z]   Version:          0.18.0
[2020-08-03T04:21:11.950Z]   GitCommit:        fec3683
[2020-08-03T04:21:11.950Z] Unable to find image 'alpine:3.4' locally
[2020-08-03T04:21:12.522Z] 3.4: Pulling from library/alpine
[2020-08-03T04:21:12.784Z] c1e54eec4b57: Pulling fs layer
[2020-08-03T04:21:13.046Z] c1e54eec4b57: Download complete
[2020-08-03T04:21:13.312Z] c1e54eec4b57: Pull complete
[2020-08-03T04:21:13.312Z] Digest: sha256:b733d4a32c4da6a00a84df2ca32791bb03df95400243648d8c539e7b4cce329c
[2020-08-03T04:21:13.312Z] Status: Downloaded newer image for alpine:3.4
[2020-08-03T04:21:15.542Z] + python .ci/scripts/pre_archive_test.py
[2020-08-03T04:21:16.931Z] Copy ./x-pack/filebeat/build into build/x-pack/filebeat/build
[2020-08-03T04:21:16.955Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-20394/src/github.com/elastic/beats/build
[2020-08-03T04:21:17.007Z] Recording test results
[2020-08-03T04:21:18.714Z] Stashed 4 file(s)
[2020-08-03T04:21:18.734Z] Archiving artifacts
[2020-08-03T04:21:19.493Z] + python .ci/scripts/search_system_tests.py
[2020-08-03T04:21:19.520Z] [INFO] system-tests='build/x-pack/filebeat/build/system-tests'. If no empty then let's create a tarball
[2020-08-03T04:21:19.883Z] + tar --version
[2020-08-03T04:21:20.254Z] + tar --exclude=x-pack-filebeat--system-tests-linux.tgz -czf x-pack-filebeat--system-tests-linux.tgz build/x-pack/filebeat/build/system-tests
[2020-08-03T04:21:35.201Z] Archiving artifacts
[2020-08-03T04:38:14.196Z] + tar --version
[2020-08-03T04:38:35.542Z] + tar -xpf source.tgz
[2020-08-03T05:27:32.900Z] Cancelling nested steps due to timeout
[2020-08-03T05:27:33.138Z] Sending interrupt signal to process
[2020-08-03T05:27:53.140Z] After 20s process did not stop
[2020-08-03T05:28:02.989Z] [INFO] source.tgz was not extracted : null
[2020-08-03T05:28:25.975Z] + rm source.tgz
[2020-08-03T05:28:27.744Z] Post stage
[2020-08-03T05:28:27.760Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-20394/src/github.com/elastic/beats
[2020-08-03T05:28:32.901Z] Body did not finish within grace period; terminating with extreme prejudice
[2020-08-03T05:28:36.915Z] Error when executing always post condition:
[2020-08-03T05:28:36.935Z] org.jenkinsci.plugins.workflow.steps.FlowInterruptedException
[2020-08-03T05:28:36.935Z] 	at org.jenkinsci.plugins.workflow.steps.TimeoutStepExecution.cancel(TimeoutStepExecution.java:165)
[2020-08-03T05:28:36.935Z] 	at org.jenkinsci.plugins.workflow.steps.TimeoutStepExecution.access$100(TimeoutStepExecution.java:38)
[2020-08-03T05:28:36.935Z] 	at org.jenkinsci.plugins.workflow.steps.TimeoutStepExecution$1.run(TimeoutStepExecution.java:139)
[2020-08-03T05:28:36.935Z] 	at jenkins.security.ImpersonatingScheduledExecutorService$1.run(ImpersonatingScheduledExecutorService.java:58)
[2020-08-03T05:28:36.935Z] 	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
[2020-08-03T05:28:36.935Z] 	at java.util.concurrent.FutureTask.run(FutureTask.java:266)
[2020-08-03T05:28:36.935Z] 	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$201(ScheduledThreadPoolExecutor.java:180)
[2020-08-03T05:28:36.935Z] 	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293)
[2020-08-03T05:28:36.935Z] 	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
[2020-08-03T05:28:36.935Z] 	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
[2020-08-03T05:28:36.935Z] 	at java.lang.Thread.run(Thread.java:748)
[2020-08-03T05:28:36.935Z] 
[2020-08-03T05:28:37.089Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-20394/src/github.com/elastic/beats
[2020-08-03T05:28:37.437Z] + find . -type f -name TEST*.xml -path */build/* -delete
[2020-08-03T05:28:37.462Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-20394/src/github.com/elastic/beats/Lint
[2020-08-03T05:28:37.651Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-20394/src/github.com/elastic/beats/Filebeat-x-pack-Windows
[2020-08-03T05:28:37.845Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-20394/src/github.com/elastic/beats/Filebeat-x-pack
[2020-08-03T05:28:38.303Z] + cat
[2020-08-03T05:28:38.303Z] + /usr/local/bin/runbld ./runbld-script
[2020-08-03T05:28:38.303Z] Picked up JAVA_TOOL_OPTIONS: -Dfile.encoding=UTF8
[2020-08-03T05:28:44.912Z] runbld>>> runbld started
[2020-08-03T05:28:44.912Z] runbld>>> 1.6.12/f45d832f2ba0aa2722ab4ec1fda8ad140f027f8b
[2020-08-03T05:28:46.830Z] runbld>>> The following profiles matched the job 'Beats/beats/PR-20394' in order of occurrence in the config (last value wins).
[2020-08-03T05:28:48.218Z] runbld>>> Debug logging enabled.
[2020-08-03T05:28:48.218Z] runbld>>> Storing result
[2020-08-03T05:28:48.218Z] runbld>>> Store result: created {:total 2, :successful 2, :failed 0} 1
[2020-08-03T05:28:48.218Z] runbld>>> BUILD: https://c150076387b5421f9154dfbf536e5c60.us-west1.gcp.cloud.es.io:9243/build-1587637540455/t/20200803052847-022EEA48
[2020-08-03T05:28:48.218Z] runbld>>> Adding system facts.
[2020-08-03T05:28:49.609Z] runbld>>> Adding vcs info for the latest commit:  8e81706d9a4aef9ecab3e303582eeb292408224c
[2020-08-03T05:28:49.609Z] runbld>>> >>>>>>>>>>>> SCRIPT EXECUTION BEGIN >>>>>>>>>>>>
[2020-08-03T05:28:49.609Z] runbld>>> Adding /usr/lib/jvm/java-8-openjdk-amd64/bin to the path.
[2020-08-03T05:28:49.609Z] + echo 'Processing JUnit reports with runbld...'
[2020-08-03T05:28:49.609Z] Processing JUnit reports with runbld...
[2020-08-03T05:28:49.871Z] runbld>>> <<<<<<<<<<<< SCRIPT EXECUTION END <<<<<<<<<<<<
[2020-08-03T05:28:49.871Z] runbld>>> DURATION: 33ms
[2020-08-03T05:28:49.871Z] runbld>>> STDOUT: 40 bytes
[2020-08-03T05:28:49.871Z] runbld>>> STDERR: 49 bytes
[2020-08-03T05:28:49.871Z] runbld>>> WRAPPED PROCESS: SUCCESS (0)
[2020-08-03T05:28:49.871Z] runbld>>> Searching for build metadata in /var/lib/jenkins/workspace/Beats_beats_PR-20394/src/github.com/elastic/beats
[2020-08-03T05:28:51.259Z] runbld>>> Storing build metadata: 
[2020-08-03T05:28:51.259Z] runbld>>> Adding test report.
[2020-08-03T05:28:51.259Z] runbld>>> Searching for junit test output files with the pattern: TEST-.*\.xml$ in: /var/lib/jenkins/workspace/Beats_beats_PR-20394/src/github.com/elastic/beats
[2020-08-03T05:28:51.833Z] runbld>>> Found 6 test output files
[2020-08-03T05:28:52.410Z] runbld>>> Test output logs contained: Errors: 0 Failures: 0 Tests: 2148 Skipped: 250
[2020-08-03T05:28:52.671Z] runbld>>> Storing result
[2020-08-03T05:28:52.671Z] runbld>>> FAILURES: 0
[2020-08-03T05:28:52.933Z] runbld>>> Store result: updated {:total 2, :successful 2, :failed 0} 2
[2020-08-03T05:28:52.933Z] runbld>>> BUILD: https://c150076387b5421f9154dfbf536e5c60.us-west1.gcp.cloud.es.io:9243/build-1587637540455/t/20200803052847-022EEA48
[2020-08-03T05:28:53.195Z] runbld>>> Email notification disabled by environment variable.
[2020-08-03T05:28:53.195Z] runbld>>> Slack notification disabled by environment variable.
[2020-08-03T05:28:59.426Z] Running on Jenkins in /var/lib/jenkins/workspace/Beats_beats_PR-20394
[2020-08-03T05:28:59.759Z] [INFO] getVaultSecret: Getting secrets
[2020-08-03T05:28:59.859Z] Masking supported pattern matches of $VAULT_ADDR or $VAULT_ROLE_ID or $VAULT_SECRET_ID
[2020-08-03T05:29:01.066Z] + chmod 755 generate-build-data.sh
[2020-08-03T05:29:01.066Z] + ./generate-build-data.sh https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats/PR-20394/ https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats/PR-20394/runs/1 ABORTED 7692930
[2020-08-03T05:29:01.066Z] INFO: curl https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats/PR-20394/runs/1/steps/?limit=10000 -o steps-info.json
[2020-08-03T05:29:01.617Z] INFO: curl https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats/PR-20394/runs/1/tests/?status=FAILED -o tests-errors.json

@andrewkroh andrewkroh merged commit b671339 into elastic:master Aug 3, 2020
v1v added a commit to v1v/beats that referenced this pull request Aug 6, 2020
…ne-2.0

* upstream/master:
  [docs] Promote ingest management to beta (elastic#20295)
  Upgrade elasticsearch client library used in tests (elastic#20405)
  Disable logging when pulling on python integration tests (elastic#20397)
  Remove pillow from testing requirements.txt (elastic#20407)
  [Filebeat][ATP Module]Setting user agent field required by the API (elastic#20440)
  [Ingest Manager] Send datastreams fields (elastic#20402)
  Add event.ingested to all Filebeat modules (elastic#20386)
  [Elastic Agent] Fix agent control socket path to always be less than 107 characters (elastic#20426)
  Improve cgroup_regex docs with examples (elastic#20425)
  Makes `metrics` config option required in app_insights (elastic#20406)
  Ensure install scripts only install if needed (elastic#20349)
  Update container name for the azure filesets (elastic#19899)
  Group same timestamp metrics values in app_insights metricset (elastic#20403)
  add_process_metadata processor adds container id even if process metadata not accessible (elastic#19767)
  Support "cluster" scope in Metricbeat elasticsearch module (elastic#18547)
  [Filebeat][SophosXG Module] Renaming module and fileset (elastic#20396)
  Update Suricata dashboards (elastic#20394)
  [Elastic Agent] Improve version, restart, enroll CLI commands (elastic#20359)
  Prepare home directories for docker images in a different stage (elastic#20356)
v1v added a commit to v1v/beats that referenced this pull request Aug 6, 2020
…allation

* upstream/master: (23 commits)
  [docs] Promote ingest management to beta (elastic#20295)
  Upgrade elasticsearch client library used in tests (elastic#20405)
  Disable logging when pulling on python integration tests (elastic#20397)
  Remove pillow from testing requirements.txt (elastic#20407)
  [Filebeat][ATP Module]Setting user agent field required by the API (elastic#20440)
  [Ingest Manager] Send datastreams fields (elastic#20402)
  Add event.ingested to all Filebeat modules (elastic#20386)
  [Elastic Agent] Fix agent control socket path to always be less than 107 characters (elastic#20426)
  Improve cgroup_regex docs with examples (elastic#20425)
  Makes `metrics` config option required in app_insights (elastic#20406)
  Ensure install scripts only install if needed (elastic#20349)
  Update container name for the azure filesets (elastic#19899)
  Group same timestamp metrics values in app_insights metricset (elastic#20403)
  add_process_metadata processor adds container id even if process metadata not accessible (elastic#19767)
  Support "cluster" scope in Metricbeat elasticsearch module (elastic#18547)
  [Filebeat][SophosXG Module] Renaming module and fileset (elastic#20396)
  Update Suricata dashboards (elastic#20394)
  [Elastic Agent] Improve version, restart, enroll CLI commands (elastic#20359)
  Prepare home directories for docker images in a different stage (elastic#20356)
  New multiline mode in Filebeat: while_pattern (elastic#19662)
  ...
andrewkroh added a commit to andrewkroh/beats that referenced this pull request Aug 6, 2020
This is a followup to elastic#20220 to get the correct dashboard files into place.

(cherry picked from commit b671339)
andrewkroh added a commit that referenced this pull request Aug 11, 2020
)

* [Filebeat] Updates to Suricata module (#20220)

* Updates to Suricata module

- Fix convert processor fail_on_error parameter naming.
- Add event.ingested to ingest node pipeline.
- Remove ECS suffixing from dashboard/viz titles.
- Prioritize using ECS fields in dashboards.
- Add Suricata logo to dashboards.

* Always remove event.ingested from test data

(cherry picked from commit 0659a12)

* Update Suricata dashboards (#20394)

This is a followup to #20220 to get the correct dashboard files into place.

(cherry picked from commit b671339)
melchiormoulin pushed a commit to melchiormoulin/beats that referenced this pull request Oct 14, 2020
This is a followup to elastic#20220 to get the correct dashboard files into place.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants