[jira] [Commented] (AMBARI-17649) Fix Logfeeder input configs for hdfs and hbase

["Maciej Bryński (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/AMBARI-17649?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16266634#comment-16266634 ] 

Maciej Bryński commented on AMBARI-17649:
-----------------------------------------

I've got a problem with hdfs-audit.log

2017-11-24 16:07:39,747 [file=hdfs-audit.log] ERROR org.apache.ambari.logfeeder.util.LogFeederUtil (LogFeederUtil.java:303) - Error parsing string. length=337, input=input:source=file, path=/var/log/hadoop/hdfs/hdfs-audit.log. First upto 100 characters=name=null, pair=ugi=uid=bigdata-hive_bind,cn=users,cn=accounts,dc=bmit,dc=local (auth:PROXY) via ...

I think split pattern "=" can't handle multiple "=" signs.
Also this line could be a problem.
https://github.com/apache/ambari/blob/trunk/ambari-logsearch/ambari-logsearch-logfeeder/src/main/java/org/apache/ambari/logfeeder/filter/FilterKeyValue.java#L81

> Fix Logfeeder input configs for hdfs and hbase
> ----------------------------------------------
>
>                 Key: AMBARI-17649
>                 URL: https://issues.apache.org/jira/browse/AMBARI-17649
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-logsearch
>    Affects Versions: 2.4.0
>            Reporter: Olivér Szabó
>            Assignee: Olivér Szabó
>             Fix For: 2.4.0
>
>
> hdfs audit log is not parsed, same with hbase if custom there is a custom hbase user



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)