Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Filebeat's Snyk module is not retrieving the audit dataset throwing an error #27293

Closed
michaelhyatt opened this issue Aug 10, 2021 · 3 comments · Fixed by #27358
Closed

Filebeat's Snyk module is not retrieving the audit dataset throwing an error #27293

michaelhyatt opened this issue Aug 10, 2021 · 3 comments · Fixed by #27358
Assignees
@P1llus
Labels
Filebeat Filebeat needs_team Indicates that the issue/PR needs a Team:* label

Comments

@michaelhyatt
Copy link
Contributor

  • Version: 7.14.0
  • Operating System: Any
  • Steps to Reproduce: Configure the snyk module and enable the audit dataset and start filebeat with Snyk module with -e.

The log file shows the following error and no more data is being retrieved from Snyk:

2021-08-10T16:42:28.785+1000	ERROR	[input.httpjson-cursor]	v2/request.go:188	error processing response: server responded with status code 400: <!DOCTYPE html>
<html lang=en>
  <meta charset=utf-8>
  <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">
  <title>Error 400 (Bad Request)!!1</title>
  <style>
    *{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px}* > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px}
  </style>
  <a href=//www.google.com/><span id=logo aria-label=Google></span></a>
  <p><b>400.</b> <ins>That’s an error.</ins>
  <p>Your client has issued a malformed or illegal request.  <ins>That’s all we know.</ins>
	{"id": "642D94E7884BE681", "input_source": "https://snyk.io/api/v1/org/a74651b5-a1c6-4a0a-b4b6-87788fb0f8f6/audit?page=1&sortOrder=ASC", "input_url": "https://snyk.io/api/v1/org/a74651b5-a1c6-4a0a-b4b6-87788fb0f8f6/audit?page=1&sortOrder=ASC"}
@michaelhyatt michaelhyatt added the Filebeat Filebeat label Aug 10, 2021
@botelastic botelastic bot added the needs_team Indicates that the issue/PR needs a Team:* label label Aug 10, 2021
@botelastic
Copy link

botelastic bot commented Aug 10, 2021

This issue doesn't have a Team:<team> label.

@michaelhyatt
Copy link
Contributor Author

^^ @papicella

@P1llus P1llus self-assigned this Aug 13, 2021
@P1llus
Copy link
Member

P1llus commented Aug 13, 2021

Will see if we can push some quick fixes for these, as they might have been slightly modified on the Snyk side

@P1llus P1llus mentioned this issue Aug 13, 2021
Merged
6 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@P1llus P1llus

Labels
Filebeat Filebeat needs_team Indicates that the issue/PR needs a Team:* label
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

[Filebeat] Fixes for Snyk API changes P1llus/beats
2 participants
@P1llus @michaelhyatt