Details
-
Bug
-
Status: Done
-
Major
-
Resolution: Done
-
0.4.2
-
None
Description
When running on Elasticsearch with X-Pack enabled, the following exception is thrown in the Metron REST logs.
2018-05-23T07:43:16.000 ERROR [org.apache.metron.elasticsearch.utils.ElasticsearchUtils] - Failed to convert search request to JSON java.lang.NoClassDefFoundError: com/fasterxml/jackson/dataformat/smile/SmileParser at org.elasticsearch.common.xcontent.XContentFactory.contentBuilder(XContentFactory.java:123) at org.elasticsearch.action.support.ToXContentToBytes.buildAsBytes(ToXContentToBytes.java:62) at org.elasticsearch.action.support.ToXContentToBytes.buildAsBytes(ToXContentToBytes.java:52) at org.apache.metron.elasticsearch.utils.ElasticsearchUtils.toJSON(ElasticsearchUtils.java:277) at org.apache.metron.elasticsearch.dao.ElasticsearchRequestSubmitter.submitSearch(ElasticsearchRequestSubmitter.java:58) at org.apache.metron.elasticsearch.dao.ElasticsearchDao.search(ElasticsearchDao.java:172) at org.apache.metron.elasticsearch.dao.ElasticsearchMetaAlertDao.search(ElasticsearchMetaAlertDao.java:403) at org.apache.metron.rest.service.impl.SearchServiceImpl.search(SearchServiceImpl.java:83) at org.apache.metron.rest.controller.SearchController.search(SearchController.java:54)
This does not happen with all queries, just some queries. For example, the following query completes successfully.
{ "indices" : [], "query" : "*", "size" : 100, "from" : 0, "sort" : [ \{ "field" : "timestamp", "sortOrder" : "DESC" } ], "fields" : null, "facetFields" : null }
On the other hand, this query fails with the exception shown above.
{ "indices" : [], "query" : "*", "size" : 100, "from" : 0, "sort" : [ \{ "field" : "timestamp", "sortOrder" : "DESC" } ], "fields" : null, "facetFields" : [] }
Attachments
Issue Links
- links to