You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@metron.apache.org by "Nick Allen (JIRA)" <ji...@apache.org> on 2017/07/10 18:41:00 UTC

[jira] [Created] (METRON-1027) Errant Log Message When No GeoIP Hit on Valid, External IPv4 Address

Nick Allen created METRON-1027:
----------------------------------

             Summary: Errant Log Message When No GeoIP Hit on Valid, External IPv4 Address
                 Key: METRON-1027
                 URL: https://issues.apache.org/jira/browse/METRON-1027
             Project: Metron
          Issue Type: Bug
            Reporter: Nick Allen
            Assignee: Nick Allen


When a valid public IPv4 address does not match a record in the Maxmind GeoIP database, a log message indicates that an error occurred with the GeoLite2 DB.  

{code}
2017-07-05 12:50:34.266 o.a.m.e.a.g.GeoLiteDatabase WARN Metron GeoLite2 DB encountered an error
com.maxmind.geoip2.exception.AddressNotFoundException: The address X.X.X.X is not in the database.
at com.maxmind.geoip2.DatabaseReader.get(DatabaseReader.java:157) ~[stormjar.jar:?]
at com.maxmind.geoip2.DatabaseReader.city(DatabaseReader.java:202) ~[stormjar.jar:?]
at org.apache.metron.enrichment.adapters.geo.GeoLiteDatabase.get(GeoLiteDatabase.java:136) [stormjar.jar:?]
at org.apache.metron.enrichment.adapters.geo.GeoAdapter.enrich(GeoAdapter.java:47) [stormjar.jar:?]
at org.apache.metron.enrichment.adapters.geo.GeoAdapter.enrich(GeoAdapter.java:31) [stormjar.jar:?]
at org.apache.metron.enrichment.bolt.GenericEnrichmentBolt$1.load(GenericEnrichmentBolt.java:151) [stormjar.jar:?]
at org.apache.metron.enrichment.bolt.GenericEnrichmentBolt$1.load(GenericEnrichmentBolt.java:148) [stormjar.jar:?]
at org.apache.metron.guava.enrichment.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3579) [stormjar.jar:?]
at org.apache.metron.guava.enrichment.cache.LocalCache$Segment.loadSync(LocalCache.java:2372) [stormjar.jar:?]
at org.apache.metron.guava.enrichment.cache.LocalCache$Segment.lockedGetOrLoad(LocalCache.java:2335) [stormjar.jar:?]
at org.apache.metron.guava.enrichment.cache.LocalCache$Segment.get(LocalCache.java:2250) [stormjar.jar:?]
at org.apache.metron.guava.enrichment.cache.LocalCache.get(LocalCache.java:3980) [stormjar.jar:?]
at org.apache.metron.guava.enrichment.cache.LocalCache.getOrLoad(LocalCache.java:3984) [stormjar.jar:?]​
at org.apache.metron.guava.enrichment.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:4868) [stormjar.jar:?]
at org.apache.metron.guava.enrichment.cache.LocalCache$LocalLoadingCache.getUnchecked(LocalCache.java:4874) [stormjar.jar:?]
at org.apache.metron.enrichment.bolt.GenericEnrichmentBolt.execute(GenericEnrichmentBolt.java:223) [stormjar.jar:?]
at org.apache.storm.daemon.executor$fn_10431$tuple_action_fn_10433.invoke(executor.clj:728) storm-core-1.1.0.2.6.0.3-8.jar:1.1.0.2.6.0.3-8
at org.apache.storm.daemon.executor$mk_task_receiver$fn__10352.invoke(executor.clj:460) storm-core-1.1.0.2.6.0.3-8.jar:1.1.0.2.6.0.3-8
at org.apache.storm.disruptor$clojure_handler$reify__9867.onEvent(disruptor.clj:40) storm-core-1.1.0.2.6.0.3-8.jar:1.1.0.2.6.0.3-8
at org.apache.storm.utils.DisruptorQueue.consumeBatchToCursor(DisruptorQueue.java:472) storm-core-1.1.0.2.6.0.3-8.jar:1.1.0.2.6.0.3-8
at org.apache.storm.utils.DisruptorQueue.consumeBatchWhenAvailable(DisruptorQueue.java:451) storm-core-1.1.0.2.6.0.3-8.jar:1.1.0.2.6.0.3-8
at org.apache.storm.disruptor$consume_batch_when_available.invoke(disruptor.clj:73) storm-core-1.1.0.2.6.0.3-8.jar:1.1.0.2.6.0.3-8
at org.apache.storm.daemon.executor$fn_10431$fn10444$fn_10497.invoke(executor.clj:847) storm-core-1.1.0.2.6.0.3-8.jar:1.1.0.2.6.0.3-8
at org.apache.storm.util$async_loop$fn__553.invoke(util.clj:484) storm-core-1.1.0.2.6.0.3-8.jar:1.1.0.2.6.0.3-8
at clojure.lang.AFn.run(AFn.java:22) [clojure-1.7.0.jar:?]
at java.lang.Thread.run(Thread.java:748) ?:1.8.0_131
2017-07-05 12:50:34.266 o.a.m.e.a.g.GeoAdapter ERROR GEO Enrichment failure: 146.62.129.174
{code}

Really no error has occurred with the GeoIP database.  Not having a hit in the database is an expected condition and processing should continue without the errant log message.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)