in Grafana how to pass a search query to search two strings with OR operator in logs? - grafana

{app="overflow"}|="Checking error 1" OR |="Checking warning 1" OR |="Checking info 1"
I tried this one it was not working.
Please let me know what can be tried to have two strings searched up in one query.
Thanks.

Use the following query:
{app="overflow"} |~ "(Checking error 1)|(Checking warning 1)|(Checking info 1)"
Obs: if you have problems, try one of the following options:
{app="overflow"} |~ `(Checking error 1)|(Checking warning 1)|(Checking info 1)`
or
{app="overflow"} |~ "Checking error 1|Checking warning 1|Checking info 1"

Related

Snort windows 10 Missing argument to RULE_PATH error

I am using sort 2.9.19. I am on windows 10 I am trying to test my snort.conf. I get the message
"ERROR: D:\Network Monitoring Tools\Snort2022\Snort\etc\snort.conf(117) Missing argument to RULE_PATH "
this is my path "D:\Network Monitoring Tools\Snort2022\Snort" this works with other var's.
This is my rule_path:
var RULE_PATH "D:\Network Monitoring Tools\Snort2022\Snort\rules".
If this is not enough info, please let me know what i should inlcude.
thanks for your advice and suggestions

Remove-S3Bucket : The specified bucket does not exist

I had created 3 buckets for testing and then later on deleted via PowerShell Command as below:
Get-S3Bucket| select -Skip 1 | foreach {Remove-S3Bucket -BucketName $_.Bucketname -DeleteBucketContent}
However, after couple of hours, I run Get-S3Bucket and I see the same buckets listed. I checked the console and found 3 buckets already there. I tried opening one of them and got "Data Not Found" error as per this screenshot:
Link:[https://onedrive.live.com/?cid=AE48A34880F3B8E4&id=AE48A34880F3B8E4%21142505&parId=AE48A34880F3B8E4%21111&o=OneUp]
I thought it might be a stale object, so tried creating another with the same name and it won't let me create one saying 'bucket already exists', as per below screenshot:
Link:[https://onedrive.live.com/?cid=AE48A34880F3B8E4&id=AE48A34880F3B8E4%21142504&parId=AE48A34880F3B8E4%21111&o=OneUp]
I tried again removing it from PowerShell, and get this error "The specified bucket does not exist", below screenshot:
Link:[https://onedrive.live.com/?cid=AE48A34880F3B8E4&id=AE48A34880F3B8E4%21142506&parId=AE48A34880F3B8E4%21111&o=OneUp]
Can someone suggest anything?
-kt

Cannot recognize char '!' while using topredicate in BAP

I tried to use topredicate tool in bap to translate il to SMT-LIB2.
But this command returns an error:
./topredicate -il test.il -post "R_EBP:u32 != R_ESP:u32 -solver z3 -noopt -stp-out test.smt
The error is:
A parsing exception occured while parsing "!" Fatal error: exception Lexer.LexError(line 1: Unrecognized char '!')"
Does anybody know what happened? How can I solve the problem?
PS. Anybody knows how to configure z3 in BAP? It really confuses me that it can't work while I configure it by following INSTALL.
This is really a BAP issue, it looks to me that it doesn't get all the way to an SMT solver yet. Could it be that there is a " missing just before -solver?
-post "R_EBP:u32 != R_ESP:u32"

Report design not valid Error Message

I have edit query from old template by replace new query sql.
Error message comes as :
Compiling to file... C:\ECLIPSE\workspace\EIS-HR\Web-inf\hradmin\HR_EIS1.jasper
Active top component: null C:\ECLIPSE\workspace\EIS-HR\Web-inf\hradmin\HR_EIS1.jrxml
net.sf.jasperreports.engine.design.JRValidationException: Report design not valid :       
1. Field not found : DM_DEPT_DESC      2. Field not found : SM_GENDER
at net.sf.jasperreports.engine.design.JRAbstractCompiler.verifyDesign(JRAbstractCompiler.java:271)
at net.sf.jasperreports.engine.design.JRAbstractCompiler.compileReport(JRAbstractCompiler.java:153)
at com.jaspersoft.ireport.designer.compiler.IReportCompiler.run(IReportCompiler.java:512)
at org.openide.util.RequestProcessor$Task.run(RequestProcessor.java:572)
at org.openide.util.RequestProcessor$Processor.run(RequestProcessor.java:997)
Compilation running time: 231
Field not found, where is wrong to my xml file.
It looks like your report template is looking for two fields (DM_DEPT_DESC and SM_GENDER) that are not found in your query results.

Is there a way to add errors from build step in TeamCity to the email notification?

I have a Powershell build step, and I'd like to add some messages fromt the script to the resulting email that is sent to people on the notification list. I see this happen for tests where the number of failures and the error is added to the email. But, how can I add my custom messages from the PowerShell build step to the resulting email?
Have you tried using service messages?
See here:http://confluence.jetbrains.com/display/TCD7/Build+Script+Interaction+with+TeamCity
You could use
write-host "##teamcity[message text='Its broken again' errorDetails='Your exception message' status='FAILURE']"
In order for the errors to be included in emails, I found I needed to add "compilationStarted" and "compilationFinished" tags, e.g:
##teamcity[compilationStarted compiler='Solution.sln']
##teamcity[message text='1>File.cpp(1): error C2065: "stackoverflow" : undeclared identifier' status='ERROR']
##teamcity[compilationFinished compiler='Solution.sln']
I use a Python script to parse the output from devenv, looking for specific strings to add as errors and warnings. The email adds these under a "compilation errors" section.
If you mean to pipe the output of an error that occurred in the Powershell script you are running then try piping the error object to a TeamCity service message after it has been caught
This is untested code but it might work for you:
trap [SystemException]
{
write-host "##teamcity[message text='An error occurred' errorDetails='$_' status='ERROR']";exit 1
}
OR
try
{
# Something...
}
catch
{
write-host "##teamcity[message text='An error occurred' errorDetails='$_' status='ERROR']";exit 1
}