Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix mysql slowlog parser #4183

Merged
merged 1 commit into from
May 3, 2017
Merged

Fix mysql slowlog parser #4183

merged 1 commit into from
May 3, 2017

Conversation

tsg
Copy link
Contributor

@tsg tsg commented May 3, 2017

The IP grok expression was bogus.

@tsg tsg added Filebeat Filebeat needs_backport PR is waiting to be backported to other branches. review v5.4.1 labels May 3, 2017
Fix mysql slowlog parser
ca58f24 
The IP grok expression was bogus.
@tsg tsg force-pushed the fix_mysql_slowlog_ip branch from 26e5c33 to ca58f24 Compare May 3, 2017 10:03
ruflin
ruflin approved these changes May 3, 2017
View reviewed changes
Copy link
Member

@ruflin ruflin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

WFG

@ruflin ruflin merged commit eec6097 into elastic:master May 3, 2017
@tsg tsg mentioned this pull request May 8, 2017
Merged
@tsg tsg removed the needs_backport PR is waiting to be backported to other branches. label May 8, 2017
tsg added a commit to tsg/beats that referenced this pull request May 9, 2017
@tsg
Fix mysql slowlog parser (elastic#4183)
a3dc1e7 
The IP grok expression was bogus.
(cherry picked from commit eec6097)
ruflin pushed a commit that referenced this pull request May 9, 2017
@tsg @ruflin
Fix mysql slowlog parser (#4183) (#4252)
0af3712 
The IP grok expression was bogus.
(cherry picked from commit eec6097)
@liuhuang9492
Copy link

liuhuang9492 commented May 10, 2017 •
edited
Loading

@ruflin I have changed the file filebeat/module/mysql/slowlog/ingest/pipeline.json , but the error:

Provided Grok expressions do not match field value: [# User@Host: sns[sns] @ [10.10.10.10] Id: 4921654\n# Query_time: 1.611364 Lock_time: 0.000059 Rows_sent: 0 Rows_examined: 1842248\nSET timestamp=1494413943;\nUPDATE report SET deleted_at = '2017-05-10 18:59:02' WHERE type= 'circle_article' AND source = '12224222';]

and I install filebeat rpm package . mysql 5.6.23 . Can you help me？what I shuold do. thanks.

@ruflin
Copy link
Member

ruflin commented May 11, 2017

@liuhuang9492 This fix is not release yet. The fix is currently only available in the 6.0.0-alpha1 releases (see tab Preview Release here: https://www.elastic.co/downloads/beats/filebeat) or in the nightly builds: https://beats-nightlies.s3.amazonaws.com/index.html?prefix=filebeat/

@presto9292
Copy link

Faced same issue as @liuhuang9492
Just editing pipeline.json is not enough, need to delete the previously loaded pipeline definition in ES as well - then it works

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@ruflin ruflin ruflin approved these changes

Assignees
No one assigned
Labels
Filebeat Filebeat review
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@tsg @liuhuang9492 @ruflin @presto9292