New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix mysql slowlog parser #4183

Merged
merged 1 commit into from May 3, 2017

Conversation

Projects
None yet
4 participants
@tsg
Collaborator

tsg commented May 3, 2017

The IP grok expression was bogus.

Fix mysql slowlog parser
The IP grok expression was bogus.
@ruflin

ruflin approved these changes May 3, 2017

WFG

@ruflin ruflin merged commit eec6097 into elastic:master May 3, 2017

6 checks passed

CLA Commit author is a member of Elasticsearch
Details
codecov/patch Coverage not affected when comparing 0dd223f...ca58f24
Details
codecov/project 64.54% (+0.02%) compared to 0dd223f
Details
continuous-integration/appveyor/pr AppVeyor build succeeded
Details
continuous-integration/travis-ci/pr The Travis CI build passed
Details
default Build finished.
Details

tsg added a commit to tsg/beats that referenced this pull request May 8, 2017

Fix mysql slowlog parser (elastic#4183)
The IP grok expression was bogus.
(cherry picked from commit eec6097)

@tsg tsg removed the needs_backport label May 8, 2017

tsg added a commit to tsg/beats that referenced this pull request May 9, 2017

Fix mysql slowlog parser (elastic#4183)
The IP grok expression was bogus.
(cherry picked from commit eec6097)

ruflin added a commit that referenced this pull request May 9, 2017

Fix mysql slowlog parser (#4183) (#4252)
The IP grok expression was bogus.
(cherry picked from commit eec6097)
@liuhuang9492

This comment has been minimized.

liuhuang9492 commented May 10, 2017

@ruflin I have changed the file filebeat/module/mysql/slowlog/ingest/pipeline.json , but the error:

Provided Grok expressions do not match field value: [# User@Host: sns[sns] @ [10.10.10.10] Id: 4921654\n# Query_time: 1.611364 Lock_time: 0.000059 Rows_sent: 0 Rows_examined: 1842248\nSET timestamp=1494413943;\nUPDATE report SET deleted_at = '2017-05-10 18:59:02' WHERE type= 'circle_article' AND source = '12224222';]

and I install filebeat rpm package . mysql 5.6.23 . Can you help me?what I shuold do. thanks.

@ruflin

This comment has been minimized.

Collaborator

ruflin commented May 11, 2017

@liuhuang9492 This fix is not release yet. The fix is currently only available in the 6.0.0-alpha1 releases (see tab Preview Release here: https://www.elastic.co/downloads/beats/filebeat) or in the nightly builds: https://beats-nightlies.s3.amazonaws.com/index.html?prefix=filebeat/

@presto9292

This comment has been minimized.

presto9292 commented Jul 10, 2017

Faced same issue as @liuhuang9492
Just editing pipeline.json is not enough, need to delete the previously loaded pipeline definition in ES as well - then it works

ramon-garcia added a commit to ramon-garcia/beats that referenced this pull request Dec 5, 2017

Fix mysql slowlog parser (elastic#4183)
The IP grok expression was bogus.

athom added a commit to athom/beats that referenced this pull request Jan 25, 2018

Fix mysql slowlog parser (elastic#4183)
The IP grok expression was bogus.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment