Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bulker errors are not ecs complient #3033

Closed
michel-laterman opened this issue Oct 12, 2023 · 0 comments · Fixed by #3034
Closed

bulker errors are not ecs complient #3033

michel-laterman opened this issue Oct 12, 2023 · 0 comments · Fixed by #3034
Labels
bug Something isn't working Team:Fleet Label for the Fleet team

Comments

@michel-laterman
Copy link
Contributor

michel-laterman commented Oct 12, 2023

Some bulker errors are not ecs complient.
For example the bulker.flushRead: Error in mget request result to Elasticsearch call uses .Str("err", ERROR-STRING) which results in the resulting document with an err attribute where error.message is expected.

Occurs in many of the bulk/op*.go files

grep -r \"err\" .
./internal/pkg/bulk/opBulk.go:		log.Error().Str("mod", kModBulk).Str("err", res.String()).Msg("Fail BulkRequest result")
./internal/pkg/bulk/opApiKey.go:			log.Error().Str("err", "request too large").Msg("No API Key ID could fit request size for bulk update")
./internal/pkg/bulk/opApiKey.go:				log.Error().Str("err", res.String()).Msg("Error in bulk API Key update result to Elasticsearch")
./internal/pkg/bulk/opRead.go:		log.Warn().Str("mod", kModBulk).Str("err", res.String()).Msg("bulker.flushRead: Error in mget request result to Elasticsearch")
./internal/pkg/bulk/opSearch.go:		log.Warn().Str("mod", kModBulk).Str("err", res.String()).Msg("bulker.flushSearch: Fail writeMsearchBody")
@michel-laterman michel-laterman added bug Something isn't working Team:Fleet Label for the Fleet team labels Oct 12, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working Team:Fleet Label for the Fleet team
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant