Skip to content
This repository has been archived by the owner. It is now read-only.

Unable to upload content packs into graylog 1.2 #1605

Closed
martinwaite opened this issue Sep 16, 2015 · 6 comments
Closed

Unable to upload content packs into graylog 1.2 #1605

martinwaite opened this issue Sep 16, 2015 · 6 comments
Assignees
Labels
Milestone

Comments

@martinwaite
Copy link

@martinwaite martinwaite commented Sep 16, 2015

On my test server, I get an error when trying to upload the nginx or nginx-collector content packs from the marketplace:

2015-09-16T09:48:35.610+01:00 - [ERROR] - from org.graylog2.restclient.models.bundles.BundleService in play-akka.actor.default-dispatcher-13
Unable to create bundle
org.graylog2.restclient.lib.APIException: API call failed POST http://@192.168.160.205:12900/system/bundles returned 400 Bad Request body:
        at org.graylog2.restclient.lib.ApiClientImpl$ApiRequestBuilder.handleResponse(ApiClientImpl.java:511) ~[org.graylog2.graylog2-rest-client--1.2.0-
        at org.graylog2.restclient.lib.ApiClientImpl$ApiRequestBuilder.execute(ApiClientImpl.java:441) ~[org.graylog2.graylog2-rest-client--1.2.0-1.2.0.j
        at org.graylog2.restclient.models.bundles.BundleService.create(BundleService.java:57) ~[org.graylog2.graylog2-rest-client--1.2.0-1.2.0.jar:na]
        at controllers.api.BundlesApiController.create(BundlesApiController.java:66) [graylog-web-interface.graylog-web-interface-1.2.0.jar:1.2.0]
        at Routes$$anonfun$routes$1$$anonfun$applyOrElse$195$$anonfun$apply$1019.apply(routes_routing.scala:3153) [graylog-web-interface.graylog-web-inte
        at Routes$$anonfun$routes$1$$anonfun$applyOrElse$195$$anonfun$apply$1019.apply(routes_routing.scala:3153) [graylog-web-interface.graylog-web-inte
        at play.core.Router$HandlerInvokerFactory$$anon$4.resultCall(Router.scala:264) [com.typesafe.play.play_2.10-2.3.10.jar:2.3.10]
        at play.core.Router$HandlerInvokerFactory$JavaActionInvokerFactory$$anon$15$$anon$1.invocation(Router.scala:255) [com.typesafe.play.play_2.10-2.3
        at play.core.j.JavaAction$$anon$1.call(JavaAction.scala:55) [com.typesafe.play.play_2.10-2.3.10.jar:2.3.10]
        at play.GlobalSettings$1.call(GlobalSettings.java:67) [com.typesafe.play.play_2.10-2.3.10.jar:2.3.10]
        at play.mvc.Security$AuthenticatedAction.call(Security.java:44) [com.typesafe.play.play_2.10-2.3.10.jar:2.3.10]
        at play.core.j.JavaAction$$anonfun$11.apply(JavaAction.scala:82) [com.typesafe.play.play_2.10-2.3.10.jar:2.3.10]
        at play.core.j.JavaAction$$anonfun$11.apply(JavaAction.scala:82) [com.typesafe.play.play_2.10-2.3.10.jar:2.3.10]
        at scala.concurrent.impl.Future$PromiseCompletingRunnable.liftedTree1$1(Future.scala:24) [org.scala-lang.scala-library-2.10.4.jar:na]
        at scala.concurrent.impl.Future$PromiseCompletingRunnable.run(Future.scala:24) [org.scala-lang.scala-library-2.10.4.jar:na]
        at play.core.j.HttpExecutionContext$$anon$2.run(HttpExecutionContext.scala:40) [com.typesafe.play.play_2.10-2.3.10.jar:2.3.10]
        at play.api.libs.iteratee.Execution$trampoline$.execute(Execution.scala:46) [com.typesafe.play.play-iteratees_2.10-2.3.10.jar:2.3.10]
        at play.core.j.HttpExecutionContext.execute(HttpExecutionContext.scala:32) [com.typesafe.play.play_2.10-2.3.10.jar:2.3.10]
        at scala.concurrent.impl.Future$.apply(Future.scala:31) [org.scala-lang.scala-library-2.10.4.jar:na]
        at scala.concurrent.Future$.apply(Future.scala:485) [org.scala-lang.scala-library-2.10.4.jar:na]
        at play.core.j.JavaAction$class.apply(JavaAction.scala:82) [com.typesafe.play.play_2.10-2.3.10.jar:2.3.10]
        at play.core.Router$HandlerInvokerFactory$JavaActionInvokerFactory$$anon$15$$anon$1.apply(Router.scala:252) [com.typesafe.play.play_2.10-2.3.10.j
        at play.api.mvc.Action$$anonfun$apply$1$$anonfun$apply$4$$anonfun$apply$5.apply(Action.scala:130) [com.typesafe.play.play_2.10-2.3.10.jar:2.3.10]
        at play.api.mvc.Action$$anonfun$apply$1$$anonfun$apply$4$$anonfun$apply$5.apply(Action.scala:130) [com.typesafe.play.play_2.10-2.3.10.jar:2.3.10]
        at play.utils.Threads$.withContextClassLoader(Threads.scala:21) [com.typesafe.play.play_2.10-2.3.10.jar:2.3.10]
        at play.api.mvc.Action$$anonfun$apply$1$$anonfun$apply$4.apply(Action.scala:129) [com.typesafe.play.play_2.10-2.3.10.jar:2.3.10]
        at play.api.mvc.Action$$anonfun$apply$1$$anonfun$apply$4.apply(Action.scala:128) [com.typesafe.play.play_2.10-2.3.10.jar:2.3.10]
        at scala.Option.map(Option.scala:145) [org.scala-lang.scala-library-2.10.4.jar:na]
        at play.api.mvc.Action$$anonfun$apply$1.apply(Action.scala:128) [com.typesafe.play.play_2.10-2.3.10.jar:2.3.10]
        at play.api.mvc.Action$$anonfun$apply$1.apply(Action.scala:121) [com.typesafe.play.play_2.10-2.3.10.jar:2.3.10]
        at play.api.libs.iteratee.Iteratee$$anonfun$mapM$1.apply(Iteratee.scala:483) [com.typesafe.play.play-iteratees_2.10-2.3.10.jar:2.3.10]
        at play.api.libs.iteratee.Iteratee$$anonfun$mapM$1.apply(Iteratee.scala:483) [com.typesafe.play.play-iteratees_2.10-2.3.10.jar:2.3.10]
        at play.api.libs.iteratee.Iteratee$$anonfun$flatMapM$1.apply(Iteratee.scala:519) [com.typesafe.play.play-iteratees_2.10-2.3.10.jar:2.3.10]
        at play.api.libs.iteratee.Iteratee$$anonfun$flatMapM$1.apply(Iteratee.scala:519) [com.typesafe.play.play-iteratees_2.10-2.3.10.jar:2.3.10]
        at play.api.libs.iteratee.Iteratee$$anonfun$flatMap$1$$anonfun$apply$14.apply(Iteratee.scala:496) [com.typesafe.play.play-iteratees_2.10-2.3.10.j
        at play.api.libs.iteratee.Iteratee$$anonfun$flatMap$1$$anonfun$apply$14.apply(Iteratee.scala:496) [com.typesafe.play.play-iteratees_2.10-2.3.10.j
        at scala.concurrent.impl.Future$PromiseCompletingRunnable.liftedTree1$1(Future.scala:24) [org.scala-lang.scala-library-2.10.4.jar:na]
        at scala.concurrent.impl.Future$PromiseCompletingRunnable.run(Future.scala:24) [org.scala-lang.scala-library-2.10.4.jar:na]
        at akka.dispatch.TaskInvocation.run(AbstractDispatcher.scala:41) [com.typesafe.akka.akka-actor_2.10-2.3.5.jar:na]
        at akka.dispatch.ForkJoinExecutorConfigurator$AkkaForkJoinTask.exec(AbstractDispatcher.scala:393) [com.typesafe.akka.akka-actor_2.10-2.3.5.jar:na
        at scala.concurrent.forkjoin.ForkJoinTask.doExec(ForkJoinTask.java:260) [org.scala-lang.scala-library-2.10.4.jar:na]
        at scala.concurrent.forkjoin.ForkJoinPool$WorkQueue.runTask(ForkJoinPool.java:1339) [org.scala-lang.scala-library-2.10.4.jar:na]
        at scala.concurrent.forkjoin.ForkJoinPool.runWorker(ForkJoinPool.java:1979) [org.scala-lang.scala-library-2.10.4.jar:na]
        at scala.concurrent.forkjoin.ForkJoinWorkerThread.run(ForkJoinWorkerThread.java:107) [org.scala-lang.scala-library-2.10.4.jar:na]

versions:
graylog-web-1.2.0-5.noarch
graylog-server-1.2.0-5.noarch

Maybe I'm not downloading the content packs correctly. When I hit the download button, the JSON content appears in my browser, then I press "save as". I then attempt to upload the content pack into graylog. I have checked the files that I am uploading, and all they contain is the JSON content - they look OK as far as I can see.

@edmundoa
Copy link
Member

@edmundoa edmundoa commented Sep 16, 2015

Hi,

Could you please also share the logs that you find in the Graylog server while trying to import the content pack? I think you downloaded the content pack correctly, but in case of doubt you can also attach it to the issue, so we can take a look.

Loading

@joschi
Copy link
Contributor

@joschi joschi commented Sep 16, 2015

@martinwaite Please check the logs of your Graylog server node and post the error message(s) in there.

Loading

@martinwaite
Copy link
Author

@martinwaite martinwaite commented Sep 16, 2015

Hi,

There is nothing appearing in the graylog server logs (but perhaps that is the problem!).

2015-09-16T08:36:37.533+01:00 INFO  [AbstractValidatingSessionManager] Validating all active sessions...
2015-09-16T08:36:37.534+01:00 INFO  [AbstractValidatingSessionManager] Finished session validation.  No sessions were stopped.
2015-09-16T09:36:37.532+01:00 INFO  [AbstractValidatingSessionManager] Validating all active sessions...
2015-09-16T09:36:37.534+01:00 INFO  [AbstractValidatingSessionManager] Finished session validation.  No sessions were stopped.
2015-09-16T10:36:37.533+01:00 INFO  [AbstractValidatingSessionManager] Validating all active sessions...
2015-09-16T10:36:37.535+01:00 INFO  [AbstractValidatingSessionManager] Finished session validation.  No sessions were stopped.

Loading

@martinwaite martinwaite reopened this Sep 16, 2015
@edmundoa
Copy link
Member

@edmundoa edmundoa commented Sep 16, 2015

Hmm, that is weird, can you please also share the file with the content pack you are trying to import?

Loading

@martinwaite
Copy link
Author

@martinwaite martinwaite commented Sep 16, 2015

Here's the nginx content pack

{
  "id" : null,
  "name" : "nginx",
  "description" : "This content pack will create two inputs for the nginx `error_log` and the `access_log`. Extractors are applied to effectively read the most important data into message fields. You will be able to do searches for all requests of a given remote IP, all requests that were answered with a HTTP 400 or just all requests that were slow.\r\n\r\nFind nginx setup instructions and more details [here](http://www.graylog2.org/content-packs/547b5021e4b0a06d87eea01e)",
  "category" : "Web Servers",
  "inputs" : [ {
    "title" : "nginx error_log",
    "configuration" : {
      "allow_override_date" : true,
      "recv_buffer_size" : 1048576,
      "port" : 12302,
      "override_source" : "",
      "bind_address" : "0.0.0.0"
    },
    "type" : "org.graylog2.inputs.syslog.udp.SyslogUDPInput",
    "global" : false,
    "extractors" : [ {
      "title" : "Timestamp",
      "type" : "REGEX",
      "configuration" : {
        "regex_value" : "^.*:\\s(\\d\\d\\d\\d/\\d\\d/\\d\\d\\s\\d\\d:\\d\\d:\\d\\d)\\s.*$"
      },
      "converters" : [ {
        "type" : "DATE",
        "configuration" : {
          "date_format" : "yyyy/MM/dd HH:mm:ss "
        }
      } ],
      "order" : 0,
      "cursor_strategy" : "COPY",
      "target_field" : "timestamp",
      "source_field" : "message",
      "condition_type" : "NONE",
      "condition_value" : ""
    }, {
      "title" : "server",
      "type" : "REGEX",
      "configuration" : {
        "regex_value" : "server:\\s(.+?)(,|$)"
      },
      "converters" : [ ],
      "order" : 0,
      "cursor_strategy" : "COPY",
      "target_field" : "server",
      "source_field" : "message",
      "condition_type" : "STRING",
      "condition_value" : "server"
    }, {
      "title" : "remote_addr/client",
      "type" : "REGEX",
      "configuration" : {
        "regex_value" : "client:\\s(.+?)(,|$)"
      },
      "converters" : [ ],
      "order" : 0,
      "cursor_strategy" : "COPY",
      "target_field" : "remote_addr",
      "source_field" : "message",
      "condition_type" : "STRING",
      "condition_value" : "client"
    }, {
      "title" : "host",
      "type" : "REGEX",
      "configuration" : {
        "regex_value" : "host:\\s\"(.+?)\"(,|$)"
      },
      "converters" : [ ],
      "order" : 0,
      "cursor_strategy" : "COPY",
      "target_field" : "host",
      "source_field" : "message",
      "condition_type" : "STRING",
      "condition_value" : "host"
    }, {
      "title" : "request_path/request",
      "type" : "REGEX",
      "configuration" : {
        "regex_value" : "request:\\s\"(.+?)\"(,|$)"
      },
      "converters" : [ ],
      "order" : 0,
      "cursor_strategy" : "COPY",
      "target_field" : "request_path",
      "source_field" : "message",
      "condition_type" : "STRING",
      "condition_value" : "request"
    }, {
      "title" : "request_verb",
      "type" : "REGEX",
      "configuration" : {
        "regex_value" : "request:\\s\"(GET|HEAD|POST|PUT|DELETE|TRACE|OPTIONS|CONNECT|PATCH).+\"(,|$)"
      },
      "converters" : [ ],
      "order" : 0,
      "cursor_strategy" : "COPY",
      "target_field" : "request_verb",
      "source_field" : "message",
      "condition_type" : "STRING",
      "condition_value" : "request"
    } ],
    "static_fields" : {
      "nginx_error" : "true",
      "from_nginx" : "true"
    }
  }, {
    "title" : "nginx access_log",
    "configuration" : {
      "allow_override_date" : true,
      "recv_buffer_size" : 1048576,
      "port" : 12301,
      "override_source" : "",
      "bind_address" : "0.0.0.0"
    },
    "type" : "org.graylog2.inputs.syslog.udp.SyslogUDPInput",
    "global" : false,
    "extractors" : [ {
      "title" : "Remote Address",
      "type" : "REGEX",
      "configuration" : {
        "regex_value" : "nginx:\\s+(\\S+)"
      },
      "converters" : [ ],
      "order" : 0,
      "cursor_strategy" : "COPY",
      "target_field" : "remote_addr",
      "source_field" : "message",
      "condition_type" : "REGEX",
      "condition_value" : "^\\S+\\s+nginx:"
    }, {
      "title" : "Remote User",
      "type" : "REGEX",
      "configuration" : {
        "regex_value" : "nginx: \\S+ - (\\S+)"
      },
      "converters" : [ ],
      "order" : 1,
      "cursor_strategy" : "COPY",
      "target_field" : "remote_user",
      "source_field" : "message",
      "condition_type" : "REGEX",
      "condition_value" : "^\\S+\\s+nginx:"
    }, {
      "title" : "Request Timestamp",
      "type" : "REGEX",
      "configuration" : {
        "regex_value" : "nginx:.+?\\[(.+?)\\]"
      },
      "converters" : [ {
        "type" : "DATE",
        "configuration" : {
          "date_format" : "dd/MMM/YYYY:HH:mm:ss Z"
        }
      } ],
      "order" : 2,
      "cursor_strategy" : "COPY",
      "target_field" : "timestamp",
      "source_field" : "message",
      "condition_type" : "REGEX",
      "condition_value" : "^\\S+\\s+nginx:"
    }, {
      "title" : "Request Verb",
      "type" : "REGEX",
      "configuration" : {
        "regex_value" : "nginx:.+\\[.+\\] \"(\\S+)"
      },
      "converters" : [ ],
      "order" : 3,
      "cursor_strategy" : "COPY",
      "target_field" : "request_verb",
      "source_field" : "message",
      "condition_type" : "REGEX",
      "condition_value" : "^\\S+\\s+nginx:"
    }, {
      "title" : "Request Path",
      "type" : "REGEX",
      "configuration" : {
        "regex_value" : "nginx:.+?\"\\S+ (\\S+).+\""
      },
      "converters" : [ {
        "type" : "NUMERIC",
        "configuration" : { }
      } ],
      "order" : 4,
      "cursor_strategy" : "COPY",
      "target_field" : "request_path",
      "source_field" : "message",
      "condition_type" : "REGEX",
      "condition_value" : "^\\S+\\s+nginx:"
    }, {
      "title" : "HTTP Version",
      "type" : "REGEX",
      "configuration" : {
        "regex_value" : "nginx:.+HTTP/(\\S+)\""
      },
      "converters" : [ ],
      "order" : 5,
      "cursor_strategy" : "COPY",
      "target_field" : "http_version",
      "source_field" : "message",
      "condition_type" : "REGEX",
      "condition_value" : "^\\S+\\s+nginx:"
    }, {
      "title" : "Response Status",
      "type" : "REGEX",
      "configuration" : {
        "regex_value" : "nginx:.+?HTTP/\\S+\" (\\d+)"
      },
      "converters" : [ {
        "type" : "NUMERIC",
        "configuration" : { }
      } ],
      "order" : 6,
      "cursor_strategy" : "COPY",
      "target_field" : "response_status",
      "source_field" : "message",
      "condition_type" : "REGEX",
      "condition_value" : "^\\S+\\s+nginx:"
    }, {
      "title" : "Response Bytes",
      "type" : "REGEX",
      "configuration" : {
        "regex_value" : "nginx:.+?HTTP/\\S+\" \\d+ (\\d+)"
      },
      "converters" : [ {
        "type" : "NUMERIC",
        "configuration" : { }
      } ],
      "order" : 7,
      "cursor_strategy" : "COPY",
      "target_field" : "response_bytes",
      "source_field" : "message",
      "condition_type" : "REGEX",
      "condition_value" : "^\\S+\\s+nginx:"
    }, {
      "title" : "HTTP Referer",
      "type" : "REGEX",
      "configuration" : {
        "regex_value" : "nginx:.+?HTTP/\\S+\" \\d+ \\d+ \"(.+?)\""
      },
      "converters" : [ ],
      "order" : 9,
      "cursor_strategy" : "COPY",
      "target_field" : "http_referer",
      "source_field" : "message",
      "condition_type" : "REGEX",
      "condition_value" : "^\\S+\\s+nginx:"
    }, {
      "title" : "HTTP User Agent",
      "type" : "REGEX",
      "configuration" : {
        "regex_value" : "nginx:.+?HTTP/\\S+\" \\d+ \\d+ \".+?\" \"(.+?)\""
      },
      "converters" : [ ],
      "order" : 8,
      "cursor_strategy" : "COPY",
      "target_field" : "http_user_agent",
      "source_field" : "message",
      "condition_type" : "REGEX",
      "condition_value" : "^\\S+\\s+nginx:"
    }, {
      "title" : "Connection ID",
      "type" : "REGEX",
      "configuration" : {
        "regex_value" : "connection=(.+?)\\|"
      },
      "converters" : [ {
        "type" : "NUMERIC",
        "configuration" : { }
      } ],
      "order" : 10,
      "cursor_strategy" : "COPY",
      "target_field" : "connection_id",
      "source_field" : "message",
      "condition_type" : "REGEX",
      "condition_value" : ".+connection=.+"
    }, {
      "title" : "Connection requests",
      "type" : "REGEX",
      "configuration" : {
        "regex_value" : "connection_requests=(.+?)\\|"
      },
      "converters" : [ {
        "type" : "NUMERIC",
        "configuration" : { }
      } ],
      "order" : 11,
      "cursor_strategy" : "COPY",
      "target_field" : "connection_requests",
      "source_field" : "message",
      "condition_type" : "REGEX",
      "condition_value" : ".+connection_requests=.+"
    }, {
      "title" : "Response time",
      "type" : "REGEX",
      "configuration" : {
        "regex_value" : "millis=(.+?)>"
      },
      "converters" : [ {
        "type" : "NUMERIC",
        "configuration" : { }
      } ],
      "order" : 12,
      "cursor_strategy" : "COPY",
      "target_field" : "millis",
      "source_field" : "message",
      "condition_type" : "REGEX",
      "condition_value" : ".+millis=.+"
    }, {
      "title" : "Message",
      "type" : "REGEX",
      "configuration" : {
        "regex_value" : "nginx:.+?\\\"(\\S+.+HTTP\\/\\S+)\\\" \\d+"
      },
      "converters" : [ ],
      "order" : 13,
      "cursor_strategy" : "COPY",
      "target_field" : "message",
      "source_field" : "message",
      "condition_type" : "REGEX",
      "condition_value" : "^\\S+\\s+nginx:"
    } ],
    "static_fields" : {
      "from_nginx" : "true",
      "nginx_access" : "true"
    }
  } ],
  "streams" : [ {
    "id" : "5445736fd4c6d7d480b5f4c2",
    "title" : "nginx requests",
    "description" : "All requests that were logged into the nginx access_log",
    "disabled" : false,
    "outputs" : [ ],
    "stream_rules" : [ {
      "type" : "EXACT",
      "field" : "nginx_access",
      "value" : "true",
      "inverted" : false
    } ]
  }, {
    "id" : "5445733cd4c6d7d480b5f48b",
    "title" : "nginx errors",
    "description" : "All requests that were logged into the nginx error_log",
    "disabled" : false,
    "outputs" : [ ],
    "stream_rules" : [ {
      "type" : "EXACT",
      "field" : "nginx_error",
      "value" : "true",
      "inverted" : false
    } ]
  }, {
    "id" : "547b29b6d4c6c10b4f1b934d",
    "title" : "nginx",
    "description" : "All requests that were logged into the nginx access_log or nginx_error_log",
    "disabled" : false,
    "outputs" : [ ],
    "stream_rules" : [ {
      "type" : "EXACT",
      "field" : "from_nginx",
      "value" : "true",
      "inverted" : false
    } ]
  }, {
    "id" : "547b2ad4d4c6c10b4f1b9485",
    "title" : "nginx HTTP 4XXs",
    "description" : "All requests that were answered with a HTTP code in the 400 range by nginx",
    "disabled" : false,
    "outputs" : [ ],
    "stream_rules" : [ {
      "type" : "EXACT",
      "field" : "from_nginx",
      "value" : "true",
      "inverted" : false
    }, {
      "type" : "GREATER",
      "field" : "response_status",
      "value" : "399",
      "inverted" : false
    }, {
      "type" : "SMALLER",
      "field" : "response_status",
      "value" : "500",
      "inverted" : false
    } ]
  }, {
    "id" : "547b2a77d4c6c10b4f1b941f",
    "title" : "nginx HTTP 5XXs",
    "description" : "All requests that were answered with a HTTP code in the 500 range by nginx",
    "disabled" : false,
    "outputs" : [ ],
    "stream_rules" : [ {
      "type" : "EXACT",
      "field" : "from_nginx",
      "value" : "true",
      "inverted" : false
    }, {
      "type" : "GREATER",
      "field" : "response_status",
      "value" : "499",
      "inverted" : false
    } ]
  }, {
    "id" : "547b2a2dd4c6c10b4f1b93ce",
    "title" : "nginx HTTP 404s",
    "description" : "All requests that were answered with a HTTP 404 by nginx",
    "disabled" : false,
    "outputs" : [ ],
    "stream_rules" : [ {
      "type" : "EXACT",
      "field" : "from_nginx",
      "value" : "true",
      "inverted" : false
    }, {
      "type" : "EXACT",
      "field" : "response_status",
      "value" : "404",
      "inverted" : false
    } ]
  } ],
  "outputs" : [ ],
  "dashboards" : [ {
    "title" : "nginx overview",
    "description" : "Overview of requests handled by nginx",
    "dashboard_widgets" : [ {
      "description" : "Response codes last hour",
      "type" : "QUICKVALUES",
      "configuration" : {
        "query" : "*",
        "timerange" : {
          "type" : "relative",
          "range" : 3600
        },
        "field" : "response_status",
        "stream_id" : "5445736fd4c6d7d480b5f4c2"
      },
      "col" : 3,
      "row" : 4,
      "cache_time" : 10
    }, {
      "description" : "Response codes last 24h",
      "type" : "QUICKVALUES",
      "configuration" : {
        "query" : "*",
        "timerange" : {
          "type" : "relative",
          "range" : 86400
        },
        "field" : "response_status",
        "stream_id" : "5445736fd4c6d7d480b5f4c2"
      },
      "col" : 2,
      "row" : 4,
      "cache_time" : 10
    }, {
      "description" : "Requests last 24h",
      "type" : "SEARCH_RESULT_CHART",
      "configuration" : {
        "query" : "*",
        "interval" : "minute",
        "timerange" : {
          "type" : "relative",
          "range" : 86400
        },
        "stream_id" : "5445736fd4c6d7d480b5f4c2"
      },
      "col" : 2,
      "row" : 1,
      "cache_time" : 10
    }, {
      "description" : "Requests last 24h",
      "type" : "STREAM_SEARCH_RESULT_COUNT",
      "configuration" : {
        "query" : "*",
        "timerange" : {
          "type" : "relative",
          "range" : 86400
        },
        "stream_id" : "5445736fd4c6d7d480b5f4c2"
      },
      "col" : 1,
      "row" : 1,
      "cache_time" : 10
    }, {
      "description" : "HTTP versions last 24h",
      "type" : "QUICKVALUES",
      "configuration" : {
        "query" : "*",
        "timerange" : {
          "type" : "relative",
          "range" : 86400
        },
        "field" : "http_version",
        "stream_id" : "5445736fd4c6d7d480b5f4c2"
      },
      "col" : 1,
      "row" : 4,
      "cache_time" : 300
    }, {
      "description" : "HTTP 5XXs last 24h",
      "type" : "STREAM_SEARCH_RESULT_COUNT",
      "configuration" : {
        "query" : "*",
        "timerange" : {
          "type" : "relative",
          "range" : 86400
        },
        "stream_id" : "547b2a77d4c6c10b4f1b941f"
      },
      "col" : 1,
      "row" : 3,
      "cache_time" : 10
    }, {
      "description" : "HTTP 4XXs last 24h",
      "type" : "STREAM_SEARCH_RESULT_COUNT",
      "configuration" : {
        "query" : "*",
        "timerange" : {
          "type" : "relative",
          "range" : 86400
        },
        "stream_id" : "547b2ad4d4c6c10b4f1b9485"
      },
      "col" : 1,
      "row" : 2,
      "cache_time" : 10
    }, {
      "description" : "HTTP 4XXs last 24h",
      "type" : "SEARCH_RESULT_CHART",
      "configuration" : {
        "query" : "*",
        "interval" : "minute",
        "timerange" : {
          "type" : "relative",
          "range" : 86400
        },
        "stream_id" : "547b2ad4d4c6c10b4f1b9485"
      },
      "col" : 2,
      "row" : 2,
      "cache_time" : 10
    }, {
      "description" : "HTTP 5XXs last 24h",
      "type" : "SEARCH_RESULT_CHART",
      "configuration" : {
        "query" : "*",
        "interval" : "minute",
        "timerange" : {
          "type" : "relative",
          "range" : 86400
        },
        "stream_id" : "547b2a77d4c6c10b4f1b941f"
      },
      "col" : 2,
      "row" : 3,
      "cache_time" : 10
    } ]
  } ]
}

Loading

@edmundoa
Copy link
Member

@edmundoa edmundoa commented Sep 16, 2015

I can reproduce the issue using version 1.2 and that content pack.

Loading

@edmundoa edmundoa added the bug label Sep 16, 2015
@edmundoa edmundoa added this to the 1.2.1 milestone Sep 16, 2015
@edmundoa edmundoa self-assigned this Sep 16, 2015
edmundoa added a commit to Graylog2/graylog2-server that referenced this issue Sep 16, 2015
This is necessary to accept content packs created with previous Graylog
versions.

Fixes graylog-labs/graylog2-web-interface#1605
@joschi joschi closed this in #1425 Sep 16, 2015
joschi referenced this issue in Graylog2/graylog2-server Sep 16, 2015
Do not enforce grok patterns field in content packs
(cherry picked from commit a0e18ee)
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
3 participants