Re-apply fix for auditd dashboard by adriansr · Pull Request #27672 · elastic/beats

adriansr · 2021-08-31T19:31:45Z

Re-applies the fix introduced by #27646, as it's been reverted in #27636. This is caused by merging PRs in a different order than in master.

elasticmachine · 2021-08-31T19:31:47Z

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

Re-applies the fix introduced by #27646, as it's been reverted in #27636. This is caused by merging PRs in a different order than in master. (cherry picked from commit a389f38)

elasticmachine · 2021-08-31T20:25:16Z

💔 Tests Failed

the below badges are clickable and redirect to their specific view in the CI or DOCS

Expand to view the summary

Build stats

Start Time: 2021-08-31T19:32:03.488+0000
Duration: 53 min 57 sec
Commit: a60d33d

Test stats 🧪

Test	Results
Failed	1
Passed	5883
Skipped	662
Total	6546

Trends 🧪

Test errors

Expand to view the tests failures

`Build&Test / filebeat-goIntegTest / TestFilestreamSymlinkRemoved – github.com/elastic/beats/v7/filebeat/input/filestream`

Expand to view the error details

 Failed

Expand to view the stacktrace

 === RUN   TestFilestreamSymlinkRemoved
    environment_test.go:188: 
        	Error Trace:	environment_test.go:188
        	            				input_integration_test.go:856
        	Error:      	Not equal: 
        	            	expected: 22
        	            	actual  : 11
        	Test:       	TestFilestreamSymlinkRemoved
--- FAIL: TestFilestreamSymlinkRemoved (1.00s)

Steps errors

Expand to view the steps failures

`filebeat-goIntegTest - mage goIntegTest`

Took 5 min 42 sec . View more details on here
Description: mage goIntegTest

`filebeat-goIntegTest - mage goIntegTest`

Took 2 min 39 sec . View more details on here
Description: mage goIntegTest

`filebeat-goIntegTest - mage goIntegTest`

Took 2 min 40 sec . View more details on here
Description: mage goIntegTest

`List files to upload`

Took 0 min 0 sec . View more details on here
Description: ls -l src/github.com/elastic/beats/build/system-tests-*.tar.gz

`Error signal`

Took 0 min 0 sec . View more details on here
Description: Error 'hudson.AbortException: script returned exit code 1'

Log output

Expand to view the last 100 lines of log output

[2021-08-31T20:04:09.272Z] Change permissions with write access of all files inside the specific folder
[2021-08-31T20:04:09.272Z] + chmod -R +w /var/lib/jenkins/workspace/PR-27672-1-8e44fd8c-00dd-4ba2-9d69-58cb1d05ace1
[2021-08-31T20:04:09.645Z] Running in /var/lib/jenkins/workspace/PR-27672-1-8e44fd8c-00dd-4ba2-9d69-58cb1d05ace1
[2021-08-31T20:04:13.739Z] + gsutil --version
[2021-08-31T20:04:15.175Z] Masking supported pattern matches of $FILE_CREDENTIAL
[2021-08-31T20:04:15.541Z] + gcloud auth activate-service-account --key-file ****
[2021-08-31T20:04:16.114Z] Activated service account credentials for: [beats-ci-gcs-plugin@elastic-ci-prod.iam.gserviceaccount.com]
[2021-08-31T20:04:16.782Z] + gsutil -m -q cp ZmlsZWJlYXQtcHl0aG9uSW50ZWdUZXN0YTYwZDMzZGYyMjY3ZDc3ZjJhY2VjZDY0NmQ2NTc3ZjIxOThhNjc2Yg gs://beats-ci-temp/ci/cache/
[2021-08-31T20:07:30.208Z] ........................................................................ [ 47%]
[2021-08-31T20:13:30.466Z] ........................................................................ [ 64%]
[2021-08-31T20:18:34.633Z] ........................................................................ [ 81%]
[2021-08-31T20:23:29.821Z] ........................................................................ [ 97%]
[2021-08-31T20:24:18.772Z] .........                                                                [100%]
[2021-08-31T20:24:18.772Z] 
[2021-08-31T20:24:18.772Z] =============================== warnings summary ===============================
[2021-08-31T20:24:18.772Z] x-pack/filebeat/tests/system/test_xpack_modules.py: 406 warnings
[2021-08-31T20:24:18.772Z]   /go/src/github.com/elastic/beats/build/ve/docker/lib/python3.7/site-packages/elasticsearch/connection/base.py:177: ElasticsearchDeprecationWarning: [script.max_compilations_rate] setting was deprecated in Elasticsearch and will be removed in a future release! See the breaking changes documentation for the next major version.
[2021-08-31T20:24:18.772Z]     warnings.warn(message, category=ElasticsearchDeprecationWarning)
[2021-08-31T20:24:18.772Z] 
[2021-08-31T20:24:18.772Z] x-pack/filebeat/tests/system/test_xpack_modules.py::XPackTest::test_fileset_file_000_rabbitmq
[2021-08-31T20:24:18.772Z]   /go/src/github.com/elastic/beats/build/ve/docker/lib/python3.7/site-packages/elasticsearch/connection/base.py:177: ElasticsearchDeprecationWarning: [script.cache.max_size] setting was deprecated in Elasticsearch and will be removed in a future release! See the breaking changes documentation for the next major version.
[2021-08-31T20:24:18.772Z]     warnings.warn(message, category=ElasticsearchDeprecationWarning)
[2021-08-31T20:24:18.772Z] 
[2021-08-31T20:24:18.772Z] -- Docs: https://docs.pytest.org/en/stable/warnings.html
[2021-08-31T20:24:18.772Z] - generated xml file: /go/src/github.com/elastic/beats/x-pack/filebeat/build/TEST-python-integration.xml -
[2021-08-31T20:24:18.772Z] ============================= slowest 20 durations =============================
[2021-08-31T20:24:18.772Z] 37.14s call     x-pack/filebeat/tests/system/test_xpack_modules.py::XPackTest::test_fileset_file_257_checkpoint
[2021-08-31T20:24:18.772Z] 20.84s call     x-pack/filebeat/tests/system/test_xpack_modules.py::XPackTest::test_fileset_file_000_rabbitmq
[2021-08-31T20:24:18.772Z] 15.39s call     x-pack/filebeat/tests/system/test_xpack_modules.py::XPackTest::test_fileset_file_188_snort
[2021-08-31T20:24:18.772Z] 15.33s call     x-pack/filebeat/tests/system/test_xpack_modules.py::XPackTest::test_fileset_file_356_o365
[2021-08-31T20:24:18.772Z] 13.19s call     x-pack/filebeat/tests/system/test_xpack_modules.py::XPackTest::test_fileset_file_350_o365
[2021-08-31T20:24:18.772Z] 13.05s call     x-pack/filebeat/tests/system/test_xpack_modules.py::XPackTest::test_fileset_file_024_threatintel
[2021-08-31T20:24:18.772Z] 9.88s call     x-pack/filebeat/tests/system/test_xpack_modules.py::XPackTest::test_fileset_file_404_ibmmq
[2021-08-31T20:24:18.772Z] 9.43s call     x-pack/filebeat/tests/system/test_xpack_modules.py::XPackTest::test_fileset_file_023_threatintel
[2021-08-31T20:24:18.772Z] 9.42s call     x-pack/filebeat/tests/system/test_xpack_modules.py::XPackTest::test_fileset_file_405_ibmmq
[2021-08-31T20:24:18.780Z] 9.03s call     x-pack/filebeat/tests/system/test_xpack_modules.py::XPackTest::test_fileset_file_215_panw
[2021-08-31T20:24:18.780Z] 8.97s call     x-pack/filebeat/tests/system/test_xpack_modules.py::XPackTest::test_fileset_file_212_panw
[2021-08-31T20:24:18.780Z] 8.90s call     x-pack/filebeat/tests/system/test_xpack_modules.py::XPackTest::test_fileset_file_402_zscaler
[2021-08-31T20:24:18.780Z] 8.85s call     x-pack/filebeat/tests/system/test_xpack_modules.py::XPackTest::test_fileset_file_183_cisco
[2021-08-31T20:24:18.780Z] 8.79s call     x-pack/filebeat/tests/system/test_xpack_modules.py::XPackTest::test_fileset_file_175_cisco
[2021-08-31T20:24:18.780Z] 8.77s call     x-pack/filebeat/tests/system/test_xpack_modules.py::XPackTest::test_fileset_file_217_panw
[2021-08-31T20:24:18.780Z] 8.72s call     x-pack/filebeat/tests/system/test_xpack_modules.py::XPackTest::test_fileset_file_216_panw
[2021-08-31T20:24:18.780Z] 8.49s call     x-pack/filebeat/tests/system/test_xpack_modules.py::XPackTest::test_fileset_file_263_gcp
[2021-08-31T20:24:18.781Z] 8.43s call     x-pack/filebeat/tests/system/test_xpack_modules.py::XPackTest::test_fileset_file_265_sonicwall
[2021-08-31T20:24:18.781Z] 8.33s call     x-pack/filebeat/tests/system/test_xpack_modules.py::XPackTest::test_fileset_file_159_cisco
[2021-08-31T20:24:18.781Z] 8.33s call     x-pack/filebeat/tests/system/test_xpack_modules.py::XPackTest::test_fileset_file_030_threatintel
[2021-08-31T20:24:18.781Z] ================ 430 passed, 407 warnings in 1782.33s (0:29:42) ================
[2021-08-31T20:24:18.781Z] >> python test: Integration Testing Complete
[2021-08-31T20:24:21.539Z] Timeout set to expire in 5 min 0 sec
[2021-08-31T20:24:21.870Z] Cleaning up /var/lib/jenkins/workspace/PR-27672-1-8a30fc55-d90e-483c-9921-75ef02523e4f
[2021-08-31T20:24:21.871Z] Change ownership of all files inside the specific folder from root/root to current user/group
[2021-08-31T20:24:21.871Z] ++ id -u
[2021-08-31T20:24:21.871Z] ++ id -g
[2021-08-31T20:24:21.871Z] + docker run -v /var/lib/jenkins/workspace/PR-27672-1-8a30fc55-d90e-483c-9921-75ef02523e4f:/beat alpine:3.4 sh -c 'find /beat -user 0 -exec chown -h 1170:1171 {} \;'
[2021-08-31T20:24:21.871Z] Unable to find image 'alpine:3.4' locally
[2021-08-31T20:24:22.812Z] 3.4: Pulling from library/alpine
[2021-08-31T20:24:22.812Z] c1e54eec4b57: Pulling fs layer
[2021-08-31T20:24:23.073Z] c1e54eec4b57: Download complete
[2021-08-31T20:24:23.333Z] c1e54eec4b57: Pull complete
[2021-08-31T20:24:23.333Z] Digest: sha256:b733d4a32c4da6a00a84df2ca32791bb03df95400243648d8c539e7b4cce329c
[2021-08-31T20:24:23.333Z] Status: Downloaded newer image for alpine:3.4
[2021-08-31T20:24:25.244Z] + set -e
[2021-08-31T20:24:25.244Z] + echo 'Change permissions with write access of all files inside the specific folder'
[2021-08-31T20:24:25.244Z] Change permissions with write access of all files inside the specific folder
[2021-08-31T20:24:25.244Z] + chmod -R +w /var/lib/jenkins/workspace/PR-27672-1-8a30fc55-d90e-483c-9921-75ef02523e4f
[2021-08-31T20:24:26.288Z] Running in /var/lib/jenkins/workspace/PR-27672-1-8a30fc55-d90e-483c-9921-75ef02523e4f/src/github.com/elastic/beats/build
[2021-08-31T20:24:26.625Z] + rm -rf ve
[2021-08-31T20:24:26.625Z] + find . -type d -name vendor -exec rm -r {} ;
[2021-08-31T20:24:26.999Z] + python .ci/scripts/pre_archive_test.py
[2021-08-31T20:24:30.309Z] Copy ./x-pack/filebeat/build into build/x-pack/filebeat/build
[2021-08-31T20:24:30.339Z] Running in /var/lib/jenkins/workspace/PR-27672-1-8a30fc55-d90e-483c-9921-75ef02523e4f/src/github.com/elastic/beats/build
[2021-08-31T20:24:30.383Z] Recording test results
[2021-08-31T20:24:31.979Z] [Checks API] No suitable checks publisher found.
[2021-08-31T20:24:32.479Z] + go clean -modcache
[2021-08-31T20:24:35.840Z] Timeout set to expire in 5 min 0 sec
[2021-08-31T20:24:36.184Z] Cleaning up /var/lib/jenkins/workspace/PR-27672-1-8a30fc55-d90e-483c-9921-75ef02523e4f
[2021-08-31T20:24:36.184Z] Change ownership of all files inside the specific folder from root/root to current user/group
[2021-08-31T20:24:36.184Z] ++ id -u
[2021-08-31T20:24:36.184Z] ++ id -g
[2021-08-31T20:24:36.184Z] + docker run -v /var/lib/jenkins/workspace/PR-27672-1-8a30fc55-d90e-483c-9921-75ef02523e4f:/beat alpine:3.4 sh -c 'find /beat -user 0 -exec chown -h 1170:1171 {} \;'
[2021-08-31T20:24:46.201Z] + set -e
[2021-08-31T20:24:46.201Z] + echo 'Change permissions with write access of all files inside the specific folder'
[2021-08-31T20:24:46.201Z] Change permissions with write access of all files inside the specific folder
[2021-08-31T20:24:46.201Z] + chmod -R +w /var/lib/jenkins/workspace/PR-27672-1-8a30fc55-d90e-483c-9921-75ef02523e4f
[2021-08-31T20:24:46.562Z] Running in /var/lib/jenkins/workspace/PR-27672-1-8a30fc55-d90e-483c-9921-75ef02523e4f
[2021-08-31T20:24:53.299Z] + gsutil --version
[2021-08-31T20:24:54.738Z] Masking supported pattern matches of $FILE_CREDENTIAL
[2021-08-31T20:24:55.096Z] + gcloud auth activate-service-account --key-file ****
[2021-08-31T20:24:55.668Z] Activated service account credentials for: [beats-ci-gcs-plugin@elastic-ci-prod.iam.gserviceaccount.com]
[2021-08-31T20:24:56.309Z] + gsutil -m -q cp eC1wYWNrL2ZpbGViZWF0LXB5dGhvbkludGVnVGVzdGE2MGQzM2RmMjI2N2Q3N2YyYWNlY2Q2NDZkNjU3N2YyMTk4YTY3NmI gs://beats-ci-temp/ci/cache/
[2021-08-31T20:24:58.698Z] Stage "Extended" skipped due to earlier failure(s)
[2021-08-31T20:24:58.787Z] Stage "Packaging" skipped due to earlier failure(s)
[2021-08-31T20:24:58.902Z] Stage "Packaging-Pipeline" skipped due to earlier failure(s)
[2021-08-31T20:24:59.028Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-27672/src/github.com/elastic/beats
[2021-08-31T20:24:59.736Z] Running on Jenkins in /var/lib/jenkins/workspace/Beats_beats_PR-27672
[2021-08-31T20:24:59.839Z] [INFO] getVaultSecret: Getting secrets
[2021-08-31T20:24:59.890Z] Masking supported pattern matches of $VAULT_ADDR or $VAULT_ROLE_ID or $VAULT_SECRET_ID
[2021-08-31T20:25:00.871Z] + chmod 755 generate-build-data.sh
[2021-08-31T20:25:00.871Z] + ./generate-build-data.sh https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats/PR-27672/ https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats/PR-27672/runs/1 FAILURE 3177106
[2021-08-31T20:25:00.871Z] INFO: curl https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats/PR-27672/runs/1/steps/?limit=10000 -o steps-info.json

🐛 Flaky test report

❕ There are test failures but not known flaky tests.

Expand to view the summary

Test stats 🧪

Test	Results
Failed	1
Passed	5883
Skipped	662
Total	6546

Genuine test errors

💔 There are test failures but not known flaky tests, most likely a genuine test failure.

Name: Build&Test / filebeat-goIntegTest / TestFilestreamSymlinkRemoved – github.com/elastic/beats/v7/filebeat/input/filestream

Re-apply fix for auditd dashboard

a60d33d

adriansr added bug Team:Security-External Integrations backport-v7.15.0 Automated backport with mergify labels Aug 31, 2021

botelastic bot added needs_team Indicates that the issue/PR needs a Team:* label and removed needs_team Indicates that the issue/PR needs a Team:* label labels Aug 31, 2021

adriansr merged commit a389f38 into elastic:7.x Aug 31, 2021

mergify bot mentioned this pull request Aug 31, 2021

[7.15](backport #27672) Re-apply fix for auditd dashboard #27673

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Re-apply fix for auditd dashboard#27672

Re-apply fix for auditd dashboard#27672
adriansr merged 1 commit intoelastic:7.xfrom
adriansr:fix_auditd_dashboard_7.x_again

adriansr commented Aug 31, 2021

Uh oh!

elasticmachine commented Aug 31, 2021

Uh oh!

elasticmachine commented Aug 31, 2021

Build stats

Test stats 🧪

Trends 🧪

`Build&Test / filebeat-goIntegTest / TestFilestreamSymlinkRemoved – github.com/elastic/beats/v7/filebeat/input/filestream`

`filebeat-goIntegTest - mage goIntegTest`

`filebeat-goIntegTest - mage goIntegTest`

`filebeat-goIntegTest - mage goIntegTest`

`List files to upload`

`Error signal`

Test stats 🧪

Genuine test errors

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

adriansr commented Aug 31, 2021

Uh oh!

elasticmachine commented Aug 31, 2021

Uh oh!

elasticmachine commented Aug 31, 2021

💔 Tests Failed

Build stats

Test stats 🧪

Trends 🧪

Test errors

Build&Test / filebeat-goIntegTest / TestFilestreamSymlinkRemoved – github.com/elastic/beats/v7/filebeat/input/filestream

Steps errors

filebeat-goIntegTest - mage goIntegTest

filebeat-goIntegTest - mage goIntegTest

filebeat-goIntegTest - mage goIntegTest

List files to upload

Error signal

Log output

🐛 Flaky test report

Test stats 🧪

Genuine test errors

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

`Build&Test / filebeat-goIntegTest / TestFilestreamSymlinkRemoved – github.com/elastic/beats/v7/filebeat/input/filestream`

`filebeat-goIntegTest - mage goIntegTest`

`filebeat-goIntegTest - mage goIntegTest`

`filebeat-goIntegTest - mage goIntegTest`

`List files to upload`

`Error signal`