Nick Allen created METRON-1027:
----------------------------------
Summary: Errant Log Message When No GeoIP Hit on Valid, External
IPv4 Address
Key: METRON-1027
URL: https://issues.apache.org/jira/browse/METRON-1027
Project: Metron
Issue Type: Bug
Reporter: Nick Allen
Assignee: Nick Allen
When a valid public IPv4 address does not match a record in the Maxmind GeoIP
database, a log message indicates that an error occurred with the GeoLite2 DB.
{code}
2017-07-05 12:50:34.266 o.a.m.e.a.g.GeoLiteDatabase WARN Metron GeoLite2 DB
encountered an error
com.maxmind.geoip2.exception.AddressNotFoundException: The address X.X.X.X is
not in the database.
at com.maxmind.geoip2.DatabaseReader.get(DatabaseReader.java:157)
~[stormjar.jar:?]
at com.maxmind.geoip2.DatabaseReader.city(DatabaseReader.java:202)
~[stormjar.jar:?]
at
org.apache.metron.enrichment.adapters.geo.GeoLiteDatabase.get(GeoLiteDatabase.java:136)
[stormjar.jar:?]
at
org.apache.metron.enrichment.adapters.geo.GeoAdapter.enrich(GeoAdapter.java:47)
[stormjar.jar:?]
at
org.apache.metron.enrichment.adapters.geo.GeoAdapter.enrich(GeoAdapter.java:31)
[stormjar.jar:?]
at
org.apache.metron.enrichment.bolt.GenericEnrichmentBolt$1.load(GenericEnrichmentBolt.java:151)
[stormjar.jar:?]
at
org.apache.metron.enrichment.bolt.GenericEnrichmentBolt$1.load(GenericEnrichmentBolt.java:148)
[stormjar.jar:?]
at
org.apache.metron.guava.enrichment.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3579)
[stormjar.jar:?]
at
org.apache.metron.guava.enrichment.cache.LocalCache$Segment.loadSync(LocalCache.java:2372)
[stormjar.jar:?]
at
org.apache.metron.guava.enrichment.cache.LocalCache$Segment.lockedGetOrLoad(LocalCache.java:2335)
[stormjar.jar:?]
at
org.apache.metron.guava.enrichment.cache.LocalCache$Segment.get(LocalCache.java:2250)
[stormjar.jar:?]
at
org.apache.metron.guava.enrichment.cache.LocalCache.get(LocalCache.java:3980)
[stormjar.jar:?]
at
org.apache.metron.guava.enrichment.cache.LocalCache.getOrLoad(LocalCache.java:3984)
[stormjar.jar:?]
at
org.apache.metron.guava.enrichment.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:4868)
[stormjar.jar:?]
at
org.apache.metron.guava.enrichment.cache.LocalCache$LocalLoadingCache.getUnchecked(LocalCache.java:4874)
[stormjar.jar:?]
at
org.apache.metron.enrichment.bolt.GenericEnrichmentBolt.execute(GenericEnrichmentBolt.java:223)
[stormjar.jar:?]
at
org.apache.storm.daemon.executor$fn_10431$tuple_action_fn_10433.invoke(executor.clj:728)
storm-core-1.1.0.2.6.0.3-8.jar:1.1.0.2.6.0.3-8
at
org.apache.storm.daemon.executor$mk_task_receiver$fn__10352.invoke(executor.clj:460)
storm-core-1.1.0.2.6.0.3-8.jar:1.1.0.2.6.0.3-8
at
org.apache.storm.disruptor$clojure_handler$reify__9867.onEvent(disruptor.clj:40)
storm-core-1.1.0.2.6.0.3-8.jar:1.1.0.2.6.0.3-8
at
org.apache.storm.utils.DisruptorQueue.consumeBatchToCursor(DisruptorQueue.java:472)
storm-core-1.1.0.2.6.0.3-8.jar:1.1.0.2.6.0.3-8
at
org.apache.storm.utils.DisruptorQueue.consumeBatchWhenAvailable(DisruptorQueue.java:451)
storm-core-1.1.0.2.6.0.3-8.jar:1.1.0.2.6.0.3-8
at
org.apache.storm.disruptor$consume_batch_when_available.invoke(disruptor.clj:73)
storm-core-1.1.0.2.6.0.3-8.jar:1.1.0.2.6.0.3-8
at
org.apache.storm.daemon.executor$fn_10431$fn10444$fn_10497.invoke(executor.clj:847)
storm-core-1.1.0.2.6.0.3-8.jar:1.1.0.2.6.0.3-8
at org.apache.storm.util$async_loop$fn__553.invoke(util.clj:484)
storm-core-1.1.0.2.6.0.3-8.jar:1.1.0.2.6.0.3-8
at clojure.lang.AFn.run(AFn.java:22) [clojure-1.7.0.jar:?]
at java.lang.Thread.run(Thread.java:748) ?:1.8.0_131
2017-07-05 12:50:34.266 o.a.m.e.a.g.GeoAdapter ERROR GEO Enrichment failure:
146.62.129.174
{code}
Really no error has occurred with the GeoIP database. Not having a hit in the
database is an expected condition and processing should continue without the
errant log message.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
