Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ERROR] KeyError: 'userIdentity.type' #449

Open
jamaaljackson opened this issue May 9, 2024 · 0 comments
Open

[ERROR] KeyError: 'userIdentity.type' #449

jamaaljackson opened this issue May 9, 2024 · 0 comments

Comments

@jamaaljackson
Copy link

jamaaljackson commented May 9, 2024

USER ERROR, this can be closed/deleted
Error message from aes-siem-es-loader log group. Can someone help me understand what this traceback is indicating is the issue?

[ERROR] KeyError: 'userIdentity.type' Traceback (most recent call last): File "/var/task/aws_lambda_powertools/metrics/provider/base.py", line 204, in decorate response = lambda_handler(event, context, *args, **kwargs) File "/var/task/aws_lambda_powertools/logging/logger.py", line 451, in decorate return lambda_handler(event, context, *args, **kwargs) File "/var/task/index.py", line 399, in decorator return func(*args, **kwargs) File "/var/task/index.py", line 466, in lambda_handler main(event, context) File "/var/task/index.py", line 478, in main process_record(record) File "/var/task/index.py", line 531, in process_record bulkloads_into_opensearch(es_entries, collected_metrics)) File "/var/task/index.py", line 283, in bulkloads_into_opensearch for data in es_entries: File "/var/task/index.py", line 219, in get_es_entries logparser(lograw, logdata, logmeta) File "/var/task/siem/__init__.py", line 566, in __call__ self.transform_to_ecs() File "/var/task/siem/__init__.py", line 788, in transform_to_ecs ecs_dict = self.get_value_and_input_into_ecs_dict(ecs_dict) File "/var/task/siem/__init__.py", line 749, in get_value_and_input_into_ecs_dict original_keys = self.logconfig[ecs_key]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant