You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@eagle.apache.org by "hemanth dendukuri (JIRA)" <ji...@apache.org> on 2015/12/15 01:26:46 UTC
[jira] [Created] (EAGLE-87) Fail creating new policyEvaluator if the policy uses contains function.
hemanth dendukuri created EAGLE-87:
--------------------------------------
Summary: Fail creating new policyEvaluator if the policy uses contains function.
Key: EAGLE-87
URL: https://issues.apache.org/jira/browse/EAGLE-87
Project: Eagle
Issue Type: Bug
Environment: Hortonworks Sandbox 2.4
Reporter: hemanth dendukuri
Priority: Minor
Here is the policy : from hdfsAuditLogEventStream[(cmd == 'rename') and (str:contains(dst,'/tmp/pii')==true)] select * insert into outputStream;
Error in Storm topology log.
2015-12-15 00:19:39 o.a.e.s.c.i.EagleServiceClientImpl [INFO] Going to query service: http://localhost:9099/eagle-service/rest/entities?query=AlertDefinitionService%5B%40site%3D%22sandbox%22+AND+%40dataSource%3D%22hdfsAuditLog%22%5D%7B*%7D&pageSize=2147483647&treeAgg=false
2015-12-15 00:19:39 o.a.e.a.n.AlertNotificationExecutor [INFO] alert notification config really changed prefix:alertdef, timestamp:0, humanReadableDate:1970-01-01 00:00:00,000, tags: site=sandbox,dataSource=hdfsAuditLog,policyId=ContainsTest,alertExecutorId=hdfsAuditLogAlertExecutor,policyType=siddhiCEPEngine,, encodedRowkey:YEktKX_____62aP_6x97yoSv3B0ANd9Hby--xyCZKe2KKltxS9hcZXeJk1Je-7-Mrq0lGQ
2015-12-15 00:19:39 o.a.e.a.d.AlertDeduplicationExecutorBase [INFO] Alert dedup config really added prefix:alertdef, timestamp:0, humanReadableDate:1970-01-01 00:00:00,000, tags: site=sandbox,dataSource=hdfsAuditLog,policyId=ContainsTest,alertExecutorId=hdfsAuditLogAlertExecutor,policyType=siddhiCEPEngine,, encodedRowkey:YEktKX_____62aP_6x97yoSv3B0ANd9Hby--xyCZKe2KKltxS9hcZXeJk1Je-7-Mrq0lGQ
2015-12-15 00:19:39 o.a.e.a.d.AlertDeduplicationExecutorBase [INFO] Alert dedup config really added prefix:alertdef, timestamp:0, humanReadableDate:1970-01-01 00:00:00,000, tags: site=sandbox,dataSource=hdfsAuditLog,policyId=ContainsTest,alertExecutorId=hdfsAuditLogAlertExecutor,policyType=siddhiCEPEngine,, encodedRowkey:YEktKX_____62aP_6x97yoSv3B0ANd9Hby--xyCZKe2KKltxS9hcZXeJk1Je-7-Mrq0lGQ
2015-12-15 00:19:39 o.a.e.e.AlertExecutor [INFO] hdfsAuditLogAlertExecutor, partition 0 policy really added prefix:alertdef, timestamp:0, humanReadableDate:1970-01-01 00:00:00,000, tags: site=sandbox,dataSource=hdfsAuditLog,policyId=ContainsTest,alertExecutorId=hdfsAuditLogAlertExecutor,policyType=siddhiCEPEngine,, encodedRowkey:YEktKX_____62aP_6x97yoSv3B0ANd9Hby--xyCZKe2KKltxS9hcZXeJk1Je-7-Mrq0lGQ
2015-12-15 00:19:40 o.a.e.a.s.SiddhiPolicyEvaluator [INFO] Siddhi stream definition : define stream hdfsAuditLogEventStream(eagleAlertContext object,allowed bool,cmd string,dst string,host string,securityZone string,sensitivityType string,src string,timestamp long,user string);
2015-12-15 00:19:40 o.a.e.e.AlertExecutor [ERROR] Fail creating new policyEvaluator
java.lang.reflect.InvocationTargetException: null
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[na:1.7.0_79]
at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57) ~[na:1.7.0_79]
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[na:1.7.0_79]
at java.lang.reflect.Constructor.newInstance(Constructor.java:526) ~[na:1.7.0_79]
at org.apache.eagle.executor.AlertExecutor.createPolicyEvaluator(AlertExecutor.java:217) [stormjar.jar:na]
at org.apache.eagle.executor.AlertExecutor.onPolicyCreated(AlertExecutor.java:356) [stormjar.jar:na]
at org.apache.eagle.alert.policy.DynamicPolicyLoader$1.handleEvent(DynamicPolicyLoader.java:119) [stormjar.jar:na]
at com.netflix.config.AbstractPollingScheduler.fireEvent(AbstractPollingScheduler.java:184) [stormjar.jar:na]
at com.netflix.config.AbstractPollingScheduler.access$200(AbstractPollingScheduler.java:41) [stormjar.jar:na]
at com.netflix.config.AbstractPollingScheduler$1.run(AbstractPollingScheduler.java:165) [stormjar.jar:na]
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471) [na:1.7.0_79]
at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:304) [na:1.7.0_79]
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:178) [na:1.7.0_79]
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293) [na:1.7.0_79]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) [na:1.7.0_79]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) [na:1.7.0_79]
at java.lang.Thread.run(Thread.java:745) [na:1.7.0_79]
Caused by: org.wso2.siddhi.query.api.exception.ExecutionPlanValidationException: contains is neither a function extension nor an aggregated attribute extension, when creating query query in execution plan "eb9c5000-006c-463d-8fb0-47aa96063ef7"
at org.wso2.siddhi.core.util.parser.ExecutionPlanParser.parse(ExecutionPlanParser.java:127) ~[stormjar.jar:na]
at org.wso2.siddhi.core.SiddhiManager.createExecutionPlanRuntime(SiddhiManager.java:51) ~[stormjar.jar:na]
at org.wso2.siddhi.core.SiddhiManager.createExecutionPlanRuntime(SiddhiManager.java:59) ~[stormjar.jar:na]
at org.apache.eagle.alert.siddhi.SiddhiPolicyEvaluator.createSiddhiRuntime(SiddhiPolicyEvaluator.java:121) ~[stormjar.jar:na]
at org.apache.eagle.alert.siddhi.SiddhiPolicyEvaluator.init(SiddhiPolicyEvaluator.java:84) ~[stormjar.jar:na]
at org.apache.eagle.alert.siddhi.SiddhiPolicyEvaluator.<init>(SiddhiPolicyEvaluator.java:80) ~[stormjar.jar:na]
... 17 common frames omitted
Caused by: org.wso2.siddhi.core.exception.ExecutionPlanCreationException: contains is neither a function extension nor an aggregated attribute extension, when creating query query
at org.wso2.siddhi.core.util.parser.QueryParser.parse(QueryParser.java:109) ~[stormjar.jar:na]
at org.wso2.siddhi.core.util.parser.ExecutionPlanParser.parse(ExecutionPlanParser.java:117) ~[stormjar.jar:na]
... 22 common frames omitted
Caused by: org.wso2.siddhi.core.exception.ExecutionPlanCreationException: contains is neither a function extension nor an aggregated attribute extension
at org.wso2.siddhi.core.util.parser.ExpressionParser.parseExpression(ExpressionParser.java:244) ~[stormjar.jar:na]
at org.wso2.siddhi.core.util.parser.ExpressionParser.parseExpression(ExpressionParser.java:115) ~[stormjar.jar:na]
at org.wso2.siddhi.core.util.parser.ExpressionParser.parseExpression(ExpressionParser.java:103) ~[stormjar.jar:na]
at org.wso2.siddhi.core.util.parser.SingleInputStreamParser.generateProcessor(SingleInputStreamParser.java:129) ~[stormjar.jar:na]
at org.wso2.siddhi.core.util.parser.SingleInputStreamParser.parseInputStream(SingleInputStreamParser.java:86) ~[stormjar.jar:na]
at org.wso2.siddhi.core.util.parser.InputStreamParser.parse(InputStreamParser.java:51) ~[stormjar.jar:na]
at org.wso2.siddhi.core.util.parser.QueryParser.parse(QueryParser.java:64) ~[stormjar.jar:na]
... 23 common frames omitted
2015-12-15 00:19:40 o.a.e.e.AlertExecutor [WARN] Broken policy definition and stop running : {"expression":"from hdfsAuditLogEventStream[(cmd == 'open') and (str:contains(src,'/tmp/p')==true)] select * insert into outputStream;","type":"siddhiCEPEngine"}
2015-12-15 00:19:40 c.n.c.AbstractPollingScheduler [ERROR] Error in invoking listener
java.lang.IllegalStateException: java.lang.reflect.InvocationTargetException
at org.apache.eagle.executor.AlertExecutor.createPolicyEvaluator(AlertExecutor.java:221) ~[stormjar.jar:na]
at org.apache.eagle.executor.AlertExecutor.onPolicyCreated(AlertExecutor.java:356) ~[stormjar.jar:na]
at org.apache.eagle.alert.policy.DynamicPolicyLoader$1.handleEvent(DynamicPolicyLoader.java:119) ~[stormjar.jar:na]
at com.netflix.config.AbstractPollingScheduler.fireEvent(AbstractPollingScheduler.java:184) [stormjar.jar:na]
at com.netflix.config.AbstractPollingScheduler.access$200(AbstractPollingScheduler.java:41) [stormjar.jar:na]
at com.netflix.config.AbstractPollingScheduler$1.run(AbstractPollingScheduler.java:165) [stormjar.jar:na]
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471) [na:1.7.0_79]
at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:304) [na:1.7.0_79]
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:178) [na:1.7.0_79]
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293) [na:1.7.0_79]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) [na:1.7.0_79]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) [na:1.7.0_79]
at java.lang.Thread.run(Thread.java:745) [na:1.7.0_79]
Caused by: java.lang.reflect.InvocationTargetException: null
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[na:1.7.0_79]
at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57) ~[na:1.7.0_79]
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[na:1.7.0_79]
at java.lang.reflect.Constructor.newInstance(Constructor.java:526) ~[na:1.7.0_79]
at org.apache.eagle.executor.AlertExecutor.createPolicyEvaluator(AlertExecutor.java:217) ~[stormjar.jar:na]
... 12 common frames omitted
Caused by: org.wso2.siddhi.query.api.exception.ExecutionPlanValidationException: contains is neither a function extension nor an aggregated attribute extension, when creating query query in execution plan "eb9c5000-006c-463d-8fb0-47aa96063ef7"
at org.wso2.siddhi.core.util.parser.ExecutionPlanParser.parse(ExecutionPlanParser.java:127) ~[stormjar.jar:na]
at org.wso2.siddhi.core.SiddhiManager.createExecutionPlanRuntime(SiddhiManager.java:51) ~[stormjar.jar:na]
at org.wso2.siddhi.core.SiddhiManager.createExecutionPlanRuntime(SiddhiManager.java:59) ~[stormjar.jar:na]
at org.apache.eagle.alert.siddhi.SiddhiPolicyEvaluator.createSiddhiRuntime(SiddhiPolicyEvaluator.java:121) ~[stormjar.jar:na]
at org.apache.eagle.alert.siddhi.SiddhiPolicyEvaluator.init(SiddhiPolicyEvaluator.java:84) ~[stormjar.jar:na]
at org.apache.eagle.alert.siddhi.SiddhiPolicyEvaluator.<init>(SiddhiPolicyEvaluator.java:80) ~[stormjar.jar:na]
... 17 common frames omitted
Caused by: org.wso2.siddhi.core.exception.ExecutionPlanCreationException: contains is neither a function extension nor an aggregated attribute extension, when creating query query
at org.wso2.siddhi.core.util.parser.QueryParser.parse(QueryParser.java:109) ~[stormjar.jar:na]
at org.wso2.siddhi.core.util.parser.ExecutionPlanParser.parse(ExecutionPlanParser.java:117) ~[stormjar.jar:na]
... 22 common frames omitted
Caused by: org.wso2.siddhi.core.exception.ExecutionPlanCreationException: contains is neither a function extension nor an aggregated attribute extension
at org.wso2.siddhi.core.util.parser.ExpressionParser.parseExpression(ExpressionParser.java:244) ~[stormjar.jar:na]
at org.wso2.siddhi.core.util.parser.ExpressionParser.parseExpression(ExpressionParser.java:115) ~[stormjar.jar:na]
at org.wso2.siddhi.core.util.parser.ExpressionParser.parseExpression(ExpressionParser.java:103) ~[stormjar.jar:na]
at org.wso2.siddhi.core.util.parser.SingleInputStreamParser.generateProcessor(SingleInputStreamParser.java:129) ~[stormjar.jar:na]
at org.wso2.siddhi.core.util.parser.SingleInputStreamParser.parseInputStream(SingleInputStreamParser.java:86) ~[stormjar.jar:na]
at org.wso2.siddhi.core.util.parser.InputStreamParser.parse(InputStreamParser.java:51) ~[stormjar.jar:na]
at org.wso2.siddhi.core.util.parser.QueryParser.parse(QueryParser.java:64) ~[stormjar.jar:na]
... 23 common frames omitted
2015-12-15 00:19:50 s.k.ZkCoordinator [INFO] Task [1/1] Refreshing partition manager connections
2015-12-15 00:19:50 s.k.DynamicBrokersReader [INFO] Read partition info from zookeeper: GlobalPartitionInformation{partitionMap={0=sandbox.hortonworks.com:6667}}
2015-12-15 00:19:50 s.k.KafkaUtils [INFO] Task [1/1] assigned [Partition{host=sandbox.hortonworks.com:6667, partition=0}]
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)