Page MenuHomePhabricator

WDQS logstash parser does not parse some requests
Closed, ResolvedPublic

Description

Example:

[07/Aug/2017:17:43:48 +0000] "POST /sparql HTTP/1.1" 200 1234 "-" "Recommendation API (Wikimedia tool; learn more at https://meta.wikimedia.org/wiki/Recommendation_API)" 0.350 0.347 - 1.1.1.1

Probably not parsed because it has only one IP for some reason.

Event Timeline

Restricted Application added subscribers: PokestarFan, Aklapper. · View Herald Transcript
Smalyshev triaged this task as Medium priority.Aug 7 2017, 6:16 PM

Change 370511 had a related patch set uploaded (by Smalyshev; owner: Smalyshev):
[operations/puppet@production] Some requests may have no client IP defined.

https://gerrit.wikimedia.org/r/370511

Mentioned in SAL (#wikimedia-operations) [2017-08-09T16:08:04Z] <gehel> config update on logstash, a few logs might be lost during restart - T172713

Change 370511 merged by Gehel:
[operations/puppet@production] Some requests may have no client IP defined.

https://gerrit.wikimedia.org/r/370511

Smalyshev claimed this task.