[Auditbeat] Unable to get packages related data #16661
Comments
|
Pinging @elastic/siem (Team:SIEM) |
|
Looking in two files of some friends |
|
Ah I wasn't sure what file it was looking at, it does seem to be a random package that someone has put into our apt repos. I'll pull the package and fix it on my side. Thanks |
|
Reopened as this is an issue users are experiencing from time to time. |
adriansr
added a commit
to adriansr/beats
that referenced
this issue
Mar 23, 2020
Deb packages report their installed size in a field, Installed-Size, which is an integer interpreted as KiB. Some unoficial packages are adding a unit at the end of this field: Installed-Size: 65M Dpkg/Apt ignore everything after the number. Auditbeat is currently failing to parse the list of packages once this mistake is reached. This updates the dataset to: - Do not fail when installed size can't be parsed. - Understand prefixes k/K, m/M and G/b. Fixes elastic#16661
3 tasks
adriansr
added a commit
that referenced
this issue
Mar 23, 2020
* Harden system/package parsing of deb size Deb packages report their installed size in a field, Installed-Size, which is an integer interpreted as KiB. Some unofficial packages are adding a unit at the end of this field: Installed-Size: 65M System tools dpkg/apt ignore everything after the number. Auditbeat is currently failing to parse the list of installed packages once this mistake is reached. This updates the dataset to: - Do not fail when installed size can't be parsed. - Understand prefixes k/K, m/M and G/b. Fixes #16661
adriansr
added a commit
to adriansr/beats
that referenced
this issue
Mar 23, 2020
* Harden system/package parsing of deb size Deb packages report their installed size in a field, Installed-Size, which is an integer interpreted as KiB. Some unofficial packages are adding a unit at the end of this field: Installed-Size: 65M System tools dpkg/apt ignore everything after the number. Auditbeat is currently failing to parse the list of installed packages once this mistake is reached. This updates the dataset to: - Do not fail when installed size can't be parsed. - Understand prefixes k/K, m/M and G/b. Fixes elastic#16661 (cherry picked from commit b131405)
3 tasks
adriansr
added a commit
that referenced
this issue
Mar 24, 2020
* Harden system/package parsing of deb size Deb packages report their installed size in a field, Installed-Size, which is an integer interpreted as KiB. Some unofficial packages are adding a unit at the end of this field: Installed-Size: 65M System tools dpkg/apt ignore everything after the number. Auditbeat is currently failing to parse the list of installed packages once this mistake is reached. This updates the dataset to: - Do not fail when installed size can't be parsed. - Understand prefixes k/K, m/M and G/b. Fixes #16661 (cherry picked from commit b131405)
adriansr
added a commit
to adriansr/beats
that referenced
this issue
Mar 24, 2020
* Harden system/package parsing of deb size Deb packages report their installed size in a field, Installed-Size, which is an integer interpreted as KiB. Some unofficial packages are adding a unit at the end of this field: Installed-Size: 65M System tools dpkg/apt ignore everything after the number. Auditbeat is currently failing to parse the list of installed packages once this mistake is reached. This updates the dataset to: - Do not fail when installed size can't be parsed. - Understand prefixes k/K, m/M and G/b. Fixes elastic#16661 (cherry picked from commit b131405)
3 tasks
adriansr
added a commit
that referenced
this issue
Mar 24, 2020
…17230) Deb packages report their installed size in a field, Installed-Size, which is an integer interpreted as KiB. Some unofficial packages are adding a unit at the end of this field: Installed-Size: 65M System tools dpkg/apt ignore everything after the number. Auditbeat is currently failing to parse the list of installed packages once this mistake is reached. This updates the dataset to: - Do not fail when installed size can't be parsed. - Understand prefixes k/K, m/M and G/b. Fixes #16661 (cherry picked from commit b131405)
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
I keep getting the below from the System module of Auditbeat in relation to packages information.
failed to get packages: error getting DEB packages: error converting 25G to int: strconv.ParseUint: parsing "25G": invalid syntaxFor confirmed bugs, please report:
The text was updated successfully, but these errors were encountered: