You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@eagle.apache.org by "hemanth dendukuri (JIRA)" <ji...@apache.org> on 2016/03/02 01:19:18 UTC
[jira] [Resolved] (EAGLE-87) Fail creating new policyEvaluator if the policy uses contains function.
[ https://issues.apache.org/jira/browse/EAGLE-87?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
hemanth dendukuri resolved EAGLE-87.
------------------------------------
Resolution: Fixed
Fix Version/s: v0.3.0
This issue is fixed after the upgrade to new Siddhi Engine
> Fail creating new policyEvaluator if the policy uses contains function.
> -----------------------------------------------------------------------
>
> Key: EAGLE-87
> URL: https://issues.apache.org/jira/browse/EAGLE-87
> Project: Eagle
> Issue Type: Bug
> Environment: Hortonworks Sandbox 2.4
> Reporter: hemanth dendukuri
> Priority: Minor
> Fix For: v0.3.0
>
>
> Here is the policy : from hdfsAuditLogEventStream[(cmd == 'rename') and (str:contains(dst,'/tmp/pii')==true)] select * insert into outputStream;
> Error in Storm topology log.
> 2015-12-15 00:19:39 o.a.e.s.c.i.EagleServiceClientImpl [INFO] Going to query service: http://localhost:9099/eagle-service/rest/entities?query=AlertDefinitionService%5B%40site%3D%22sandbox%22+AND+%40dataSource%3D%22hdfsAuditLog%22%5D%7B*%7D&pageSize=2147483647&treeAgg=false
> 2015-12-15 00:19:39 o.a.e.a.n.AlertNotificationExecutor [INFO] alert notification config really changed prefix:alertdef, timestamp:0, humanReadableDate:1970-01-01 00:00:00,000, tags: site=sandbox,dataSource=hdfsAuditLog,policyId=ContainsTest,alertExecutorId=hdfsAuditLogAlertExecutor,policyType=siddhiCEPEngine,, encodedRowkey:YEktKX_____62aP_6x97yoSv3B0ANd9Hby--xyCZKe2KKltxS9hcZXeJk1Je-7-Mrq0lGQ
> 2015-12-15 00:19:39 o.a.e.a.d.AlertDeduplicationExecutorBase [INFO] Alert dedup config really added prefix:alertdef, timestamp:0, humanReadableDate:1970-01-01 00:00:00,000, tags: site=sandbox,dataSource=hdfsAuditLog,policyId=ContainsTest,alertExecutorId=hdfsAuditLogAlertExecutor,policyType=siddhiCEPEngine,, encodedRowkey:YEktKX_____62aP_6x97yoSv3B0ANd9Hby--xyCZKe2KKltxS9hcZXeJk1Je-7-Mrq0lGQ
> 2015-12-15 00:19:39 o.a.e.a.d.AlertDeduplicationExecutorBase [INFO] Alert dedup config really added prefix:alertdef, timestamp:0, humanReadableDate:1970-01-01 00:00:00,000, tags: site=sandbox,dataSource=hdfsAuditLog,policyId=ContainsTest,alertExecutorId=hdfsAuditLogAlertExecutor,policyType=siddhiCEPEngine,, encodedRowkey:YEktKX_____62aP_6x97yoSv3B0ANd9Hby--xyCZKe2KKltxS9hcZXeJk1Je-7-Mrq0lGQ
> 2015-12-15 00:19:39 o.a.e.e.AlertExecutor [INFO] hdfsAuditLogAlertExecutor, partition 0 policy really added prefix:alertdef, timestamp:0, humanReadableDate:1970-01-01 00:00:00,000, tags: site=sandbox,dataSource=hdfsAuditLog,policyId=ContainsTest,alertExecutorId=hdfsAuditLogAlertExecutor,policyType=siddhiCEPEngine,, encodedRowkey:YEktKX_____62aP_6x97yoSv3B0ANd9Hby--xyCZKe2KKltxS9hcZXeJk1Je-7-Mrq0lGQ
> 2015-12-15 00:19:40 o.a.e.a.s.SiddhiPolicyEvaluator [INFO] Siddhi stream definition : define stream hdfsAuditLogEventStream(eagleAlertContext object,allowed bool,cmd string,dst string,host string,securityZone string,sensitivityType string,src string,timestamp long,user string);
> 2015-12-15 00:19:40 o.a.e.e.AlertExecutor [ERROR] Fail creating new policyEvaluator
> java.lang.reflect.InvocationTargetException: null
> at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[na:1.7.0_79]
> at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57) ~[na:1.7.0_79]
> at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[na:1.7.0_79]
> at java.lang.reflect.Constructor.newInstance(Constructor.java:526) ~[na:1.7.0_79]
> at org.apache.eagle.executor.AlertExecutor.createPolicyEvaluator(AlertExecutor.java:217) [stormjar.jar:na]
> at org.apache.eagle.executor.AlertExecutor.onPolicyCreated(AlertExecutor.java:356) [stormjar.jar:na]
> at org.apache.eagle.alert.policy.DynamicPolicyLoader$1.handleEvent(DynamicPolicyLoader.java:119) [stormjar.jar:na]
> at com.netflix.config.AbstractPollingScheduler.fireEvent(AbstractPollingScheduler.java:184) [stormjar.jar:na]
> at com.netflix.config.AbstractPollingScheduler.access$200(AbstractPollingScheduler.java:41) [stormjar.jar:na]
> at com.netflix.config.AbstractPollingScheduler$1.run(AbstractPollingScheduler.java:165) [stormjar.jar:na]
> at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471) [na:1.7.0_79]
> at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:304) [na:1.7.0_79]
> at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:178) [na:1.7.0_79]
> at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293) [na:1.7.0_79]
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) [na:1.7.0_79]
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) [na:1.7.0_79]
> at java.lang.Thread.run(Thread.java:745) [na:1.7.0_79]
> Caused by: org.wso2.siddhi.query.api.exception.ExecutionPlanValidationException: contains is neither a function extension nor an aggregated attribute extension, when creating query query in execution plan "eb9c5000-006c-463d-8fb0-47aa96063ef7"
> at org.wso2.siddhi.core.util.parser.ExecutionPlanParser.parse(ExecutionPlanParser.java:127) ~[stormjar.jar:na]
> at org.wso2.siddhi.core.SiddhiManager.createExecutionPlanRuntime(SiddhiManager.java:51) ~[stormjar.jar:na]
> at org.wso2.siddhi.core.SiddhiManager.createExecutionPlanRuntime(SiddhiManager.java:59) ~[stormjar.jar:na]
> at org.apache.eagle.alert.siddhi.SiddhiPolicyEvaluator.createSiddhiRuntime(SiddhiPolicyEvaluator.java:121) ~[stormjar.jar:na]
> at org.apache.eagle.alert.siddhi.SiddhiPolicyEvaluator.init(SiddhiPolicyEvaluator.java:84) ~[stormjar.jar:na]
> at org.apache.eagle.alert.siddhi.SiddhiPolicyEvaluator.<init>(SiddhiPolicyEvaluator.java:80) ~[stormjar.jar:na]
> ... 17 common frames omitted
> Caused by: org.wso2.siddhi.core.exception.ExecutionPlanCreationException: contains is neither a function extension nor an aggregated attribute extension, when creating query query
> at org.wso2.siddhi.core.util.parser.QueryParser.parse(QueryParser.java:109) ~[stormjar.jar:na]
> at org.wso2.siddhi.core.util.parser.ExecutionPlanParser.parse(ExecutionPlanParser.java:117) ~[stormjar.jar:na]
> ... 22 common frames omitted
> Caused by: org.wso2.siddhi.core.exception.ExecutionPlanCreationException: contains is neither a function extension nor an aggregated attribute extension
> at org.wso2.siddhi.core.util.parser.ExpressionParser.parseExpression(ExpressionParser.java:244) ~[stormjar.jar:na]
> at org.wso2.siddhi.core.util.parser.ExpressionParser.parseExpression(ExpressionParser.java:115) ~[stormjar.jar:na]
> at org.wso2.siddhi.core.util.parser.ExpressionParser.parseExpression(ExpressionParser.java:103) ~[stormjar.jar:na]
> at org.wso2.siddhi.core.util.parser.SingleInputStreamParser.generateProcessor(SingleInputStreamParser.java:129) ~[stormjar.jar:na]
> at org.wso2.siddhi.core.util.parser.SingleInputStreamParser.parseInputStream(SingleInputStreamParser.java:86) ~[stormjar.jar:na]
> at org.wso2.siddhi.core.util.parser.InputStreamParser.parse(InputStreamParser.java:51) ~[stormjar.jar:na]
> at org.wso2.siddhi.core.util.parser.QueryParser.parse(QueryParser.java:64) ~[stormjar.jar:na]
> ... 23 common frames omitted
> 2015-12-15 00:19:40 o.a.e.e.AlertExecutor [WARN] Broken policy definition and stop running : {"expression":"from hdfsAuditLogEventStream[(cmd == 'open') and (str:contains(src,'/tmp/p')==true)] select * insert into outputStream;","type":"siddhiCEPEngine"}
> 2015-12-15 00:19:40 c.n.c.AbstractPollingScheduler [ERROR] Error in invoking listener
> java.lang.IllegalStateException: java.lang.reflect.InvocationTargetException
> at org.apache.eagle.executor.AlertExecutor.createPolicyEvaluator(AlertExecutor.java:221) ~[stormjar.jar:na]
> at org.apache.eagle.executor.AlertExecutor.onPolicyCreated(AlertExecutor.java:356) ~[stormjar.jar:na]
> at org.apache.eagle.alert.policy.DynamicPolicyLoader$1.handleEvent(DynamicPolicyLoader.java:119) ~[stormjar.jar:na]
> at com.netflix.config.AbstractPollingScheduler.fireEvent(AbstractPollingScheduler.java:184) [stormjar.jar:na]
> at com.netflix.config.AbstractPollingScheduler.access$200(AbstractPollingScheduler.java:41) [stormjar.jar:na]
> at com.netflix.config.AbstractPollingScheduler$1.run(AbstractPollingScheduler.java:165) [stormjar.jar:na]
> at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471) [na:1.7.0_79]
> at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:304) [na:1.7.0_79]
> at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:178) [na:1.7.0_79]
> at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293) [na:1.7.0_79]
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) [na:1.7.0_79]
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) [na:1.7.0_79]
> at java.lang.Thread.run(Thread.java:745) [na:1.7.0_79]
> Caused by: java.lang.reflect.InvocationTargetException: null
> at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[na:1.7.0_79]
> at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57) ~[na:1.7.0_79]
> at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[na:1.7.0_79]
> at java.lang.reflect.Constructor.newInstance(Constructor.java:526) ~[na:1.7.0_79]
> at org.apache.eagle.executor.AlertExecutor.createPolicyEvaluator(AlertExecutor.java:217) ~[stormjar.jar:na]
> ... 12 common frames omitted
> Caused by: org.wso2.siddhi.query.api.exception.ExecutionPlanValidationException: contains is neither a function extension nor an aggregated attribute extension, when creating query query in execution plan "eb9c5000-006c-463d-8fb0-47aa96063ef7"
> at org.wso2.siddhi.core.util.parser.ExecutionPlanParser.parse(ExecutionPlanParser.java:127) ~[stormjar.jar:na]
> at org.wso2.siddhi.core.SiddhiManager.createExecutionPlanRuntime(SiddhiManager.java:51) ~[stormjar.jar:na]
> at org.wso2.siddhi.core.SiddhiManager.createExecutionPlanRuntime(SiddhiManager.java:59) ~[stormjar.jar:na]
> at org.apache.eagle.alert.siddhi.SiddhiPolicyEvaluator.createSiddhiRuntime(SiddhiPolicyEvaluator.java:121) ~[stormjar.jar:na]
> at org.apache.eagle.alert.siddhi.SiddhiPolicyEvaluator.init(SiddhiPolicyEvaluator.java:84) ~[stormjar.jar:na]
> at org.apache.eagle.alert.siddhi.SiddhiPolicyEvaluator.<init>(SiddhiPolicyEvaluator.java:80) ~[stormjar.jar:na]
> ... 17 common frames omitted
> Caused by: org.wso2.siddhi.core.exception.ExecutionPlanCreationException: contains is neither a function extension nor an aggregated attribute extension, when creating query query
> at org.wso2.siddhi.core.util.parser.QueryParser.parse(QueryParser.java:109) ~[stormjar.jar:na]
> at org.wso2.siddhi.core.util.parser.ExecutionPlanParser.parse(ExecutionPlanParser.java:117) ~[stormjar.jar:na]
> ... 22 common frames omitted
> Caused by: org.wso2.siddhi.core.exception.ExecutionPlanCreationException: contains is neither a function extension nor an aggregated attribute extension
> at org.wso2.siddhi.core.util.parser.ExpressionParser.parseExpression(ExpressionParser.java:244) ~[stormjar.jar:na]
> at org.wso2.siddhi.core.util.parser.ExpressionParser.parseExpression(ExpressionParser.java:115) ~[stormjar.jar:na]
> at org.wso2.siddhi.core.util.parser.ExpressionParser.parseExpression(ExpressionParser.java:103) ~[stormjar.jar:na]
> at org.wso2.siddhi.core.util.parser.SingleInputStreamParser.generateProcessor(SingleInputStreamParser.java:129) ~[stormjar.jar:na]
> at org.wso2.siddhi.core.util.parser.SingleInputStreamParser.parseInputStream(SingleInputStreamParser.java:86) ~[stormjar.jar:na]
> at org.wso2.siddhi.core.util.parser.InputStreamParser.parse(InputStreamParser.java:51) ~[stormjar.jar:na]
> at org.wso2.siddhi.core.util.parser.QueryParser.parse(QueryParser.java:64) ~[stormjar.jar:na]
> ... 23 common frames omitted
> 2015-12-15 00:19:50 s.k.ZkCoordinator [INFO] Task [1/1] Refreshing partition manager connections
> 2015-12-15 00:19:50 s.k.DynamicBrokersReader [INFO] Read partition info from zookeeper: GlobalPartitionInformation{partitionMap={0=sandbox.hortonworks.com:6667}}
> 2015-12-15 00:19:50 s.k.KafkaUtils [INFO] Task [1/1] assigned [Partition{host=sandbox.hortonworks.com:6667, partition=0}]
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)