[METRON-1598] NoClassDefFoundError when running with Elasticsearch X-Pack

• Type: Bug
• Status: Done
• Priority: Major
• Resolution: Done
• Affects Version/s: 0.4.2
• Fix Version/s: 0.6.0
• Assignee: Nick Allen
• Reporter: Nick Allen
• Created: 04/Jun/18 17:56
• Updated: 04/Sep/18 17:14
• Resolved: 11/Jul/18 15:20

Description

When running on Elasticsearch with X-Pack enabled, the following exception is thrown in the Metron REST logs.

2018-05-23T07:43:16.000 ERROR [org.apache.metron.elasticsearch.utils.ElasticsearchUtils] - Failed to convert search request to JSON java.lang.NoClassDefFoundError: com/fasterxml/jackson/dataformat/smile/SmileParser at org.elasticsearch.common.xcontent.XContentFactory.contentBuilder(XContentFactory.java:123) at org.elasticsearch.action.support.ToXContentToBytes.buildAsBytes(ToXContentToBytes.java:62) at org.elasticsearch.action.support.ToXContentToBytes.buildAsBytes(ToXContentToBytes.java:52) at org.apache.metron.elasticsearch.utils.ElasticsearchUtils.toJSON(ElasticsearchUtils.java:277) at org.apache.metron.elasticsearch.dao.ElasticsearchRequestSubmitter.submitSearch(ElasticsearchRequestSubmitter.java:58) at org.apache.metron.elasticsearch.dao.ElasticsearchDao.search(ElasticsearchDao.java:172) at org.apache.metron.elasticsearch.dao.ElasticsearchMetaAlertDao.search(ElasticsearchMetaAlertDao.java:403) at org.apache.metron.rest.service.impl.SearchServiceImpl.search(SearchServiceImpl.java:83) at org.apache.metron.rest.controller.SearchController.search(SearchController.java:54)

This does not happen with all queries, just some queries. For example, the following query completes successfully.

{ 
  "indices" : [], 
  "query" : "*", 
  "size" : 100, 
  "from" : 0, 
  "sort" : [ \{ "field" : "timestamp", "sortOrder" : "DESC" } ], 
  "fields" : null, 
  "facetFields" : null 
}

On the other hand, this query fails with the exception shown above.

{ 
  "indices" : [], 
  "query" : "*", 
  "size" : 100, 
  "from" : 0, 
  "sort" : [ \{ "field" : "timestamp", "sortOrder" : "DESC" } ], 
  "fields" : null, 
  "facetFields" : [] 
}

Issue Links

• links to: GitHub Pull Request #1048