-
Incident report
-
Resolution: Duplicate
-
Major
-
None
-
3.0.7, 3.2.3
-
None
Hi!
The evaluation of the sent logs case sometimes incorrect.
I confirmed the events table and history_log table. I think so that there was time synchronization.
Agent active Item -> log[/tmp/test.log]
Trigger -> {hostname:log[/tmp/test.log].regexp(message)}=1
Multiple PROBLEM events generation -> True
sending data(dummy)
{
"request": "agent data",
"data": [
{
"host": "hayato_test",
"key": "log[/tmp/test.log]",
"value": "log_message 1",
"lastlogsize": 5,
"mtime": 1486350300,
"clock": 1483497174,
"ns": 98146376
},
{
"host": "hayato_test",
"key": "log[/tmp/test.log]",
"value": "test 2",
"lastlogsize": 5,
"mtime": 1486350300,
"clock": 1483497174,
"ns": 98147180
},
{
"host": "hayato_test",
"key": "log[/tmp/test.log]",
"value": "test 3",
"lastlogsize": 5,
"mtime": 1486350300,
"clock": 1483497174,
"ns": 98147517
},
{
"host": "hayato_test",
"key": "log[/tmp/test.log]",
"value": "test 4",
"lastlogsize": 5,
"mtime": 1486350300,
"clock": 1483497174,
"ns": 98148137
},
{
"host": "hayato_test",
"key": "log[/tmp/test.log]",
"value": "log_message 5",
"lastlogsize": 5,
"mtime": 1486350300,
"clock": 1483497174,
"ns": 98148541
}
],
"clock": 1483497174,
"ns": 98148600
}
events
4678090 | 0 | 0 | 94631 | 1483497174 | 1 | 0 | 98146376 4678091 | 0 | 0 | 94631 | 1483497174 | 1 | 0 | 98147180 4678092 | 0 | 0 | 94631 | 1483497174 | 1 | 0 | 98147517 4678093 | 0 | 0 | 94631 | 1483497174 | 1 | 0 | 98148137 4678094 | 0 | 0 | 94631 | 1483497174 | 1 | 0 | 98148541
history_log
86438383 | 31789 | 1483497174 | 0 | | 0 | log_message 5 | 0 | 98148541 86438382 | 31789 | 1483497174 | 0 | | 0 | test 4 | 0 | 98148137 86438380 | 31789 | 1483497174 | 0 | | 0 | test 3 | 0 | 98147517 86438378 | 31789 | 1483497174 | 0 | | 0 | test 2 | 0 | 98147180 86438375 | 31789 | 1483497174 | 0 | | 0 | log_message 1 | 0 | 98146376
Thank you.
- duplicates
-
-
- Closed
-