SHOW:
|
|
- or go back to the newest paste.
| 1 | [2019-09-12T15:57:25,484][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter | |
| 2 | P[filter-mutate{"id"=>"elastiflow_postproc_dst_as_from_as_org", "add_field"=>{"[flow][dst_autonomous_system]"=>"%{[metadata][geoip_dst][as_org]}"}}|[str]pipeline:627:23:```
| |
| 3 | mutate {
| |
| 4 | id => "elastiflow_postproc_dst_as_from_as_org" | |
| 5 | add_field => { "[flow][dst_autonomous_system]" => "%{[metadata][geoip_dst][as_org]}" }
| |
| 6 | } | |
| 7 | ```] | |
| 8 | into | |
| 9 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@27ffd08 | |
| 10 | [2019-09-12T15:57:25,525][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional | |
| 11 | [if (event.getField('[flow][ip_version]')=='undetermined')]
| |
| 12 | into | |
| 13 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@98a5f031 | |
| 14 | [2019-09-12T15:57:25,535][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional | |
| 15 | [if (event.get('[metadata][geoip_dst][asn]'))]
| |
| 16 | into | |
| 17 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@b8bdbae1 | |
| 18 | [2019-09-12T15:57:25,666][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter | |
| 19 | P[filter-mutate{"id"=>"elastiflow_postproc_src_addr_public", "replace"=>{"[flow][traffic_locality]"=>"public"}}|[str]pipeline:710:13:```
| |
| 20 | mutate {
| |
| 21 | id => "elastiflow_postproc_src_addr_public" | |
| 22 | replace => { "[flow][traffic_locality]" => "public" }
| |
| 23 | } | |
| 24 | ```] | |
| 25 | into | |
| 26 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@e59effe8 | |
| 27 | [2019-09-12T15:57:25,677][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional | |
| 28 | [if (event.get('[sflow][protocol]'))]
| |
| 29 | into | |
| 30 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@25bc6a19 | |
| 31 | [2019-09-12T15:57:25,767][DEBUG][logstash.instrument.periodicpoller.jvm] collector name {:name=>"ParNew"}
| |
| 32 | [2019-09-12T15:57:25,767][DEBUG][logstash.instrument.periodicpoller.jvm] collector name {:name=>"ConcurrentMarkSweep"}
| |
| 33 | [2019-09-12T15:57:25,797][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional | |
| 34 | [if (event.getField('[@metadata][geoip_lookup]')=='true')]
| |
| 35 | into | |
| 36 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@21a9e5a1 | |
| 37 | [2019-09-12T15:57:25,810][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter | |
| 38 | P[filter-mutate{"id"=>"elastiflow_postproc_dst_as_from_asn", "add_field"=>{"[flow][dst_autonomous_system]"=>"%{[metadata][geoip_dst][asn]}"}}|[str]pipeline:633:21:```
| |
| 39 | mutate {
| |
| 40 | id => "elastiflow_postproc_dst_as_from_asn" | |
| 41 | add_field => { "[flow][dst_autonomous_system]" => "%{[metadata][geoip_dst][asn]}" }
| |
| 42 | } | |
| 43 | ```] | |
| 44 | into | |
| 45 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@42a50b76 | |
| 46 | [2019-09-12T15:57:25,828][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional | |
| 47 | [if (event.get('[flow][src_addr]'))]
| |
| 48 | into | |
| 49 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@86994801 | |
| 50 | [2019-09-12T15:57:25,839][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter | |
| 51 | P[filter-mutate{"add_field"=>{"[flow][dst_autonomous_system]"=>"public"}}|[str]pipeline:638:21:```
| |
| 52 | mutate {
| |
| 53 | add_field => { "[flow][dst_autonomous_system]" => "public" }
| |
| 54 | } | |
| 55 | ```] | |
| 56 | into | |
| 57 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@27ffd08 | |
| 58 | [2019-09-12T15:57:25,889][DEBUG][logstash.codecs.sflow ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>208, :sample_data=>{:flow_sequence_number=>2095819, :source_id_type=>0, :source_id_index=>46, :sampling_rate=>1000, :sample_pool=>1999496057, :drops=>1425, :input_interface=>46, :output_interface=>2147483650, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>144, :record_data=>{:protocol=>1, :frame_length=>1518, :stripped=>4, :header_size=>128, :sample_header=>{:eth_dst=>"########################", :eth_src=>"#####################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>1500, :ip_identification=>39683, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>62, :ip_protocol=>6, :ip_checksum=>63298, :src_ip=>"#####################", :dst_ip=>"#################", :ip_data=>{:src_port=>26672, :dst_port=>443, :tcp_seq_number=>4220563484, :tcp_ack_number=>178617856, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>457, :tcp_checksum=>65127, :tcp_urgent_pointer=>0, :data=>6891333316688858494651476080640314568351975325824563496913311072972887993388246870181843081041120860688542495971177009554677755933456730189608934449887067895546440420021912856175}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>2017, :src_priority=>0, :dst_vlan=>2017, :dst_priority=>0}}]}}
| |
| 59 | [2019-09-12T15:57:25,912][DEBUG][logstash.codecs.sflow ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>140, :sample_data=>{:flow_sequence_number=>85526, :source_id_type=>0, :source_id_index=>17, :sampling_rate=>1000, :sample_pool=>1061776828, :drops=>0, :input_interface=>17, :output_interface=>2147483650, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>76, :record_data=>{:protocol=>1, :frame_length=>64, :stripped=>4, :header_size=>60, :sample_header=>{:eth_dst=>"#####################", :eth_src=>"####################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>40, :ip_identification=>62027, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>128, :ip_protocol=>6, :ip_checksum=>26316, :src_ip=>"###############", :dst_ip=>"################", :ip_data=>{:src_port=>50445, :dst_port=>443, :tcp_seq_number=>1950436056, :tcp_ack_number=>465758321, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>8280, :tcp_checksum=>25518, :tcp_urgent_pointer=>0, :data=>0}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>407, :src_priority=>0, :dst_vlan=>207, :dst_priority=>0}}]}}
| |
| 60 | [2019-09-12T15:57:25,925][DEBUG][logstash.codecs.sflow ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>140, :sample_data=>{:flow_sequence_number=>85527, :source_id_type=>0, :source_id_index=>17, :sampling_rate=>1000, :sample_pool=>1061777103, :drops=>0, :input_interface=>17, :output_interface=>2147483650, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>76, :record_data=>{:protocol=>1, :frame_length=>64, :stripped=>4, :header_size=>60, :sample_header=>{:eth_dst=>"####################", :eth_src=>"##################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>40, :ip_identification=>62117, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>128, :ip_protocol=>6, :ip_checksum=>26226, :src_ip=>"######################", :dst_ip=>"#####################", :ip_data=>{:src_port=>50445, :dst_port=>443, :tcp_seq_number=>1950436056, :tcp_ack_number=>466021121, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>8280, :tcp_checksum=>24858, :tcp_urgent_pointer=>0, :data=>0}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>407, :src_priority=>0, :dst_vlan=>207, :dst_priority=>0}}]}}
| |
| 61 | warning: thread "<udp.3" terminated with exception (report_on_exception is true): | |
| 62 | java.lang.StackOverflowError | |
| 63 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93) | |
| 64 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 65 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 66 | at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393) | |
| 67 | at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111) | |
| 68 | at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722) | |
| 69 | at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162) | |
| 70 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40) | |
| 71 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42) | |
| 72 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 73 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 74 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 75 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
| 76 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
| 77 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169) | |
| 78 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 79 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 80 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 81 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
| 82 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168) | |
| 83 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb) | |
| 84 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 85 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 86 | at org.jruby.RubyClass.finvoke(RubyClass.java:505) | |
| 87 | at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740) | |
| 88 | at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen) | |
| 89 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
| 90 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93) | |
| 91 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 92 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 93 | at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393) | |
| 94 | at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111) | |
| 95 | at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722) | |
| 96 | at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162) | |
| 97 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40) | |
| 98 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42) | |
| 99 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 100 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 101 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 102 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
| 103 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
| 104 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169) | |
| 105 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 106 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 107 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 108 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
| 109 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168) | |
| 110 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb) | |
| 111 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 112 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 113 | at org.jruby.RubyClass.finvoke(RubyClass.java:505) | |
| 114 | at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740) | |
| 115 | at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen) | |
| 116 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
| 117 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93) | |
| 118 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 119 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 120 | at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393) | |
| 121 | at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111) | |
| 122 | at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722) | |
| 123 | at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162) | |
| 124 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40) | |
| 125 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42) | |
| 126 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 127 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 128 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 129 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
| 130 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
| 131 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169) | |
| 132 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 133 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 134 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 135 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
| 136 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168) | |
| 137 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb) | |
| 138 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 139 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 140 | at org.jruby.RubyClass.finvoke(RubyClass.java:505) | |
| 141 | at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740) | |
| 142 | at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen) | |
| 143 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
| 144 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.buffer.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/buffer.rb:88) | |
| 145 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 146 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 147 | at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393) | |
| 148 | at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111) | |
| 149 | at org.jruby.RubyClass.finvoke(RubyClass.java:503) | |
| 150 | at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740) | |
| 151 | at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen) | |
| 152 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
| 153 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93) | |
| 154 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 155 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 156 | at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393) | |
| 157 | at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111) | |
| 158 | at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722) | |
| 159 | at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162) | |
| 160 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40) | |
| 161 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42) | |
| 162 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 163 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 164 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 165 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
| 166 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
| 167 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169) | |
| 168 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 169 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 170 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 171 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
| 172 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168) | |
| 173 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb) | |
| 174 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 175 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 176 | at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:177) | |
| 177 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40) | |
| 178 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$decode$2(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:131) | |
| 179 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 180 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 181 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 182 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
| 183 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
| 184 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$block$each$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208) | |
| 185 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 186 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 187 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 188 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
| 189 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208) | |
| 190 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb) | |
| 191 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 192 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 193 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
| 194 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:230) | |
| 195 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$decode$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:124) | |
| 196 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 197 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 198 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 199 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
| 200 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
| 201 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$block$each$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208) | |
| 202 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 203 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 204 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 205 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
| 206 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208) | |
| 207 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb) | |
| 208 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 209 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 210 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
| 211 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:230) | |
| 212 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$decode$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:109) | |
| 213 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$method$inputworker$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:151) | |
| 214 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$method$inputworker$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb) | |
| 215 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 216 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 217 | at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:183) | |
| 218 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$block$run$2(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:63) | |
| 219 | at org.jruby.runtime.CompiledIRBlockBody.callDirect(CompiledIRBlockBody.java:136) | |
| 220 | at org.jruby.runtime.IRBlockBody.call(IRBlockBody.java:77) | |
| 221 | at org.jruby.runtime.Block.call(Block.java:124) | |
| 222 | at org.jruby.RubyProc.call(RubyProc.java:295) | |
| 223 | at org.jruby.RubyProc.call(RubyProc.java:274) | |
| 224 | at org.jruby.RubyProc.call(RubyProc.java:270) | |
| 225 | at org.jruby.internal.runtime.RubyRunnable.run(RubyRunnable.java:105) | |
| 226 | at java.lang.Thread.run(Thread.java:748) | |
| 227 | [2019-09-12T15:57:25,983][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter | |
| 228 | P[filter-geoip{"id"=>"elastiflow_postproc_geoip_src_city", "source"=>"[flow][src_addr]", "database"=>"${ELASTIFLOW_GEOIP_DB_PATH:/etc/logstash/elastiflow/geoipdbs}/GeoLite2-City.mmdb", "cache_size"=>"${ELASTIFLOW_GEOIP_CACHE_SIZE:8192}", "target"=>"[metadata][geoip_src]", "fields"=>["city_name", "country_name", "country_code2", "location"]}|[str]pipeline:717:17:```
| |
| 229 | geoip {
| |
| 230 | id => "elastiflow_postproc_geoip_src_city" | |
| 231 | source => "[flow][src_addr]" | |
| 232 | database => "${ELASTIFLOW_GEOIP_DB_PATH:/etc/logstash/elastiflow/geoipdbs}/GeoLite2-City.mmdb"
| |
| 233 | cache_size => "${ELASTIFLOW_GEOIP_CACHE_SIZE:8192}"
| |
| 234 | target => "[metadata][geoip_src]" | |
| 235 | fields => [ "city_name", "country_name", "country_code2", "location" ] | |
| 236 | } | |
| 237 | ```] | |
| 238 | into | |
| 239 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@b5d170a8 | |
| 240 | [2019-09-12T15:57:26,005][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter | |
| 241 | P[filter-translate{"id"=>"sflow_translate_protocol_name", "dictionary_path"=>"${ELASTIFLOW_DICT_PATH:/etc/logstash/elastiflow/dictionaries}/sflow_header_protocol.yml", "field"=>"[sflow][protocol]", "destination"=>"[sflow][protocol]", "fallback"=>"UNKNOWN(%{[sflow][protocol]})", "override"=>"true", "refresh_behaviour"=>"replace"}|[str]pipeline:400:9:```
| |
| 242 | translate {
| |
| 243 | id => "sflow_translate_protocol_name" | |
| 244 | dictionary_path => "${ELASTIFLOW_DICT_PATH:/etc/logstash/elastiflow/dictionaries}/sflow_header_protocol.yml"
| |
| 245 | field => "[sflow][protocol]" | |
| 246 | destination => "[sflow][protocol]" | |
| 247 | fallback => "UNKNOWN(%{[sflow][protocol]})"
| |
| 248 | override => true | |
| 249 | refresh_behaviour => "replace" | |
| 250 | } | |
| 251 | ```] | |
| 252 | into | |
| 253 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@ae8c4e88 | |
| 254 | - | [2019-09-12T15:57:26,086][DEBUG][logstash.codecs.sflow ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>208, :sample_data=>{:flow_sequence_number=>1962165, :source_id_type=>0, :source_id_index=>318, :sampling_rate=>1000, :sample_pool=>3771449579, :drops=>162, :input_interface=>318, :output_interface=>38, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>144, :record_data=>{:protocol=>1, :frame_length=>1518, :stripped=>4, :header_size=>128, :sample_header=>{:eth_dst=>"######################", :eth_src=>"####################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>1500, :ip_identification=>39966, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>64, :ip_protocol=>6, :ip_checksum=>11530, :src_ip=>"10.4.90.29", :dst_ip=>"52.119.211.91", :ip_data=>{:src_port=>55298, :dst_port=>443, :tcp_seq_number=>4220966544, :tcp_ack_number=>178617856, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>457, :tcp_checksum=>28713, :tcp_urgent_pointer=>0, :data=>#############################################}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>490, :src_priority=>0, :dst_vlan=>207, :dst_priority=>0}}]}}
|
| 254 | + | [2019-09-12T15:57:26,086][DEBUG][logstash.codecs.sflow ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>208, :sample_data=>{:flow_sequence_number=>1962165, :source_id_type=>0, :source_id_index=>318, :sampling_rate=>1000, :sample_pool=>3771449579, :drops=>162, :input_interface=>318, :output_interface=>38, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>144, :record_data=>{:protocol=>1, :frame_length=>1518, :stripped=>4, :header_size=>128, :sample_header=>{:eth_dst=>"######################", :eth_src=>"####################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>1500, :ip_identification=>39966, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>64, :ip_protocol=>6, :ip_checksum=>11530, :src_ip=>"##################", :dst_ip=>"####################", :ip_data=>{:src_port=>55298, :dst_port=>443, :tcp_seq_number=>4220966544, :tcp_ack_number=>178617856, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>457, :tcp_checksum=>28713, :tcp_urgent_pointer=>0, :data=>#############################################}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>490, :src_priority=>0, :dst_vlan=>207, :dst_priority=>0}}]}}
|
| 255 | warning: thread "<udp.1" terminated with exception (report_on_exception is true): | |
| 256 | java.lang.StackOverflowError | |
| 257 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40) | |
| 258 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42) | |
| 259 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 260 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 261 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 262 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
| 263 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
| 264 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169) | |
| 265 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 266 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 267 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 268 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
| 269 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168) | |
| 270 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb) | |
| 271 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 272 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 273 | at org.jruby.RubyClass.finvoke(RubyClass.java:505) | |
| 274 | at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740) | |
| 275 | at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen) | |
| 276 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
| 277 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93) | |
| 278 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 279 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 280 | at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393) | |
| 281 | at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111) | |
| 282 | at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722) | |
| 283 | at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162) | |
| 284 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40) | |
| 285 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42) | |
| 286 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 287 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 288 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 289 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
| 290 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
| 291 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169) | |
| 292 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 293 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 294 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 295 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
| 296 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168) | |
| 297 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb) | |
| 298 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 299 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 300 | at org.jruby.RubyClass.finvoke(RubyClass.java:505) | |
| 301 | at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740) | |
| 302 | at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen) | |
| 303 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
| 304 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93) | |
| 305 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 306 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 307 | at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393) | |
| 308 | at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111) | |
| 309 | at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722) | |
| 310 | at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162) | |
| 311 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40) | |
| 312 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42) | |
| 313 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 314 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 315 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 316 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
| 317 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
| 318 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169) | |
| 319 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 320 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 321 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 322 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
| 323 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168) | |
| 324 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb) | |
| 325 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 326 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 327 | at org.jruby.RubyClass.finvoke(RubyClass.java:505) | |
| 328 | at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740) | |
| 329 | at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen) | |
| 330 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
| 331 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.buffer.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/buffer.rb:88) | |
| 332 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 333 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 334 | at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393) | |
| 335 | at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111) | |
| 336 | at org.jruby.RubyClass.finvoke(RubyClass.java:503) | |
| 337 | at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740) | |
| 338 | at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen) | |
| 339 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
| 340 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93) | |
| 341 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 342 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 343 | at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393) | |
| 344 | at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111) | |
| 345 | at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722) | |
| 346 | at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162) | |
| 347 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40) | |
| 348 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42) | |
| 349 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 350 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 351 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 352 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
| 353 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
| 354 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169) | |
| 355 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 356 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 357 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 358 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
| 359 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168) | |
| 360 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb) | |
| 361 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 362 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 363 | at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:177) | |
| 364 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40) | |
| 365 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$decode$2(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:131) | |
| 366 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 367 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 368 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 369 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
| 370 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
| 371 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$block$each$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208) | |
| 372 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 373 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 374 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 375 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
| 376 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208) | |
| 377 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb) | |
| 378 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 379 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 380 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
| 381 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:230) | |
| 382 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$decode$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:124) | |
| 383 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 384 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 385 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 386 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
| 387 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
| 388 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$block$each$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208) | |
| 389 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
| 390 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
| 391 | at org.jruby.runtime.Block.yield(Block.java:165) | |
| 392 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
| 393 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208) | |
| 394 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb) | |
| 395 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 396 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 397 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
| 398 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:230) | |
| 399 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$decode$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:109) | |
| 400 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$method$inputworker$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:151) | |
| 401 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$method$inputworker$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb) | |
| 402 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
| 403 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
| 404 | at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:183) | |
| 405 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$block$run$2(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:63) | |
| 406 | at org.jruby.runtime.CompiledIRBlockBody.callDirect(CompiledIRBlockBody.java:136) | |
| 407 | at org.jruby.runtime.IRBlockBody.call(IRBlockBody.java:77) | |
| 408 | at org.jruby.runtime.Block.call(Block.java:124) | |
| 409 | at org.jruby.RubyProc.call(RubyProc.java:295) | |
| 410 | at org.jruby.RubyProc.call(RubyProc.java:274) | |
| 411 | at org.jruby.RubyProc.call(RubyProc.java:270) | |
| 412 | at org.jruby.internal.runtime.RubyRunnable.run(RubyRunnable.java:105) | |
| 413 | at java.lang.Thread.run(Thread.java:748) | |
| 414 | [2019-09-12T15:57:26,124][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional | |
| 415 | [if !(('_geoip_lookup_failure'.include?event.getField('[tags]')))]
| |
| 416 | into | |
| 417 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@708caf9 | |
| 418 | [2019-09-12T15:57:26,135][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter | |
| 419 | P[filter-mutate{"id"=>"elastiflow_set_dst_asn", "rename"=>{"[metadata][geoip_dst][asn]"=>"[flow][dst_asn]"}}|[str]pipeline:642:19:```
| |
| 420 | mutate {
| |
| 421 | id => "elastiflow_set_dst_asn" | |
| 422 | rename => { "[metadata][geoip_dst][asn]" => "[flow][dst_asn]" }
| |
| 423 | } | |
| 424 | ```] | |
| 425 | into | |
| 426 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@f1550fea | |
| 427 | [2019-09-12T15:57:26,148][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter | |
| 428 | P[filter-cidr{"id"=>"elastiflow_ipv4_cidr_src", "address"=>["%{[flow][src_addr]}"], "network"=>["0.0.0.0/0"], "add_field"=>{"[flow][ip_version]"=>"IPv4"}}|[str]pipeline:441:9:```
| |
| 429 | cidr {
| |
| 430 | id => "elastiflow_ipv4_cidr_src" | |
| 431 | address => [ "%{[flow][src_addr]}" ]
| |
| 432 | network => [ "0.0.0.0/0" ] | |
| 433 | add_field => {
| |
| 434 | "[flow][ip_version]" => "IPv4" | |
| 435 | } | |
| 436 | } | |
| 437 | ```] | |
| 438 | into | |
| 439 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@70e99788 | |
| 440 | [2019-09-12T15:57:26,162][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter | |
| 441 | P[filter-mutate{"add_field"=>{"[flow][dst_autonomous_system]"=>"public"}, "remove_tag"=>["_geoip_lookup_failure"]}|[str]pipeline:647:19:```
| |
| 442 | mutate {
| |
| 443 | add_field => { "[flow][dst_autonomous_system]" => "public" }
| |
| 444 | remove_tag => [ "_geoip_lookup_failure" ] | |
| 445 | } | |
| 446 | ```] | |
| 447 | into | |
| 448 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@27ffd08 | |
| 449 | [2019-09-12T15:57:26,255][ERROR][org.logstash.Logstash ] java.lang.StackOverflowError |