Project

General

Profile

Bug #1134

Failure to import changed items

Added by Luke Murphey over 8 years ago. Updated about 8 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Start date:
12/10/2015
Due date:
% Done:

0%


History

#1 Updated by Luke Murphey over 8 years ago

Monitoring logs using:

index=_internal sourcetype="syndication_modular_input"

#2 Updated by Luke Murphey over 8 years ago

The latest_date is based on the latest entry.

#4 Updated by Luke Murphey over 8 years ago

Observations: *

#5 Updated by Luke Murphey over 8 years ago

Here is the search I have for listing the internal operation of the code:

index=_internal sourcetype="syndication_modular_input" | rex field=_raw "(?<action>((Skipping)|(Including)))"  | table date latest_date title action count

#7 Updated by Luke Murphey about 8 years ago

Some observations:

  • I see the input indicating that items are included, but I don't see them

#8 Updated by Luke Murphey about 8 years ago

I'm seeing the following error:

Received event for unconfigured/disabled/deleted index=training with source="source::syndication://Splunk Answers" host="host::answers.splunk.com" sourcetype="sourcetype::SplunkTraining-Answers". So far received events from 1 missing index(es).

#9 Updated by Luke Murphey about 8 years ago

Fixed the index issue.

Now monitoring for changes via:

index=_internal sourcetype="syndication_modular_input"  | rex field=_raw "(?<action>((Skipping)|(Including)))" | search count>0 OR action=Including  | table date latest_date title action count

#10 Updated by Luke Murphey about 8 years ago

Table format of events:

sourcetype="syndication"  | eval time=strftime(_time, "%a, %d %b %Y %T %z") | table time title author link

#11 Updated by Luke Murphey about 8 years ago

  • Status changed from New to In Progress

#12 Updated by Luke Murphey about 8 years ago

Wondering if this is an issue where the connection fails and this isn't communicated well.

#13 Updated by Luke Murphey about 8 years ago

  • Status changed from In Progress to Closed

Also available in: Atom PDF