Project

General

Profile

Actions
Copy link

Bug #6920

open

FR, FM and Global stats gone after 7.0.4

Added by Simen Lybekk 7 months ago. Updated 2 months ago.

Status:
New
Priority:
Normal
Assignee:
OISF Dev
Target version:
TBD
Affected Versions:
7.0.4
Effort:
Difficulty:
Label:

Description

During roll-out of 7.0.4 we experienced that non-worker stats namespaces like flow recycler, flow manager and Global were absent from the stats log.

Reverting the following commit seems to have solved the issue for us:
https://github.com/OISF/suricata/commit/f8ec39208d3f4c57da3fc394e86c64eb816cc6cd

This has been verified with a clean checkout of the suricata-7.0.4 tag.

Relevant configuration:

outputs:
- eve-log:
    enabled: true
    filemode: 644
    filename: stats-json.log
    types:
    - stats:
        deltas: false
        threads: true
        totals: false

stats:
  decoder-events: true
  decoder-events-prefix: decoder.event
  enabled: true
  interval: 8
  stream-events: true

Actions
Copy link
 #1

Updated by Simen Lybekk 7 months ago

  • Description updated (diff)
Actions
Copy link
 #2

Updated by Juliana Fajardini Reichow 2 months ago

Hello, thanks for this bug report :)

Suricata 7.0.5 had a bug fix that we think solves this ticket: https://github.com/OISF/suricata/commit/fc8a36051a183715249b3d did have a chance to test it? If yes, could you let us know if we can close this as resolved?

Actions
Copy link
 #3

Updated by Simen Lybekk 2 months ago

I'm pretty sure this can be resolved now yes, we haven't seen this since upgrading to 7.0.5.

Actions
Copy link

Also available in: Atom PDF