Slow filters logstash dashboard no longer being updated
Closed, InvalidPublic

Description

The "Abuse Filter - Slow Filters" logstash dashboard has not updated since November 15. We usually see some 50 or so hits a day, so I suspect there is a problem and slow filters are no longer being reported.

Link (you'll have to manually choose "Last 30 days" as the timeframe):
https://logstash.wikimedia.org/app/kibana#/dashboard/941a0560-b9b2-11e7-a3f7-cb9288bcae84?_g=(refreshInterval%3A(display%3AOff%2Cpause%3A!f%2Cvalue%3A0)%2Ctime%3A(from%3Anow-30d%2Cmode%3Aquick%2Cto%3Anow))

Restricted Application added subscribers: MGChecker, Aklapper. · View Herald TranscriptWed, Nov 28, 5:54 PM

@Daimona Thanks. Do you know how to filter the AbuseFilter channel so that it only shows the slow filters?

@MusikAnimal Unfortunately I don't, since I don't have access to logstash. However, looking at the commit message by Krinkle, IIUC you should be able to achieve that by grepping for Edit filter {filter_id} on {wiki} is taking longer than expected

Change 476620 had a related patch set uploaded (by MusikAnimal; owner: MusikAnimal):
[operations/mediawiki-config@master] Use log channel 'AbuseFilter' instead of 'AbuseFilterSlow'

https://gerrit.wikimedia.org/r/476620

Change 476620 merged by jenkins-bot:
[operations/mediawiki-config@master] Use log channel 'AbuseFilter' instead of 'AbuseFilterSlow'

https://gerrit.wikimedia.org/r/476620

Mentioned in SAL (#wikimedia-operations) [2018-11-29T21:54:22Z] <krinkle@deploy1001> Synchronized wmf-config/InitialiseSettings.php: T210636 - I9ebbc625f98c314 (duration: 00m 55s)