You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Summary:
Filebeat : The Cloud Foundry Input and add_cloudfoundry_metadata processor are not handling / interpreting the cloudfoundry.app.id GUID correctly for the cloudfoundry.type : access
Sample BAD GUID : cloudfoundry.app.id: low:3046190763798940950 high:12644936126740546741
The result of this is:
The meta data processor fails and so the cloudfoundry.app.name is not found, cached and populated
Because cloudfoundry.app.name is not found and cached, the api call to get the metadata is called repeatedly for each access to the app and thus filebeat is adding significant log events to the overall log stream
This is potentially adding undo load to the the cloud foundry meta data API
Example Data
Discover
Index Pattern : filebeat-* url.path : *3046190763798940950* or cloudfoundry.app.id : *3046190763798940950*'
Note both the original HTTP Accees log and the call to the Meta Data API have the malformed GUID.
Expected Result.
The GUID is properly handled,
The cloudfoundry.app.name is available and cached
There is a reduced load on the cloudfoundry API.
The text was updated successfully, but these errors were encountered:
Summary:
Filebeat : The Cloud Foundry Input and add_cloudfoundry_metadata processor are not handling / interpreting the
cloudfoundry.app.id
GUID correctly for thecloudfoundry.type : access
Sample Good GUID :
Sample BAD GUID :
cloudfoundry.app.id: low:3046190763798940950 high:12644936126740546741
The result of this is:
cloudfoundry.app.name
is not found, cached and populatedcloudfoundry.app.name
is not found and cached, the api call to get the metadata is called repeatedly for each access to the app and thus filebeat is adding significant log events to the overall log streamExample Data
Discover
Index Pattern :
filebeat-*
url.path : *3046190763798940950* or cloudfoundry.app.id : *3046190763798940950*'
Note both the original HTTP Accees log and the call to the Meta Data API have the malformed GUID.
Expected Result.
The GUID is properly handled,
The
cloudfoundry.app.name
is available and cachedThere is a reduced load on the cloudfoundry API.
The text was updated successfully, but these errors were encountered: