I’ve started to receive warning messages in the graylog-server log file this morning.
The warning message I’m receiving is as below:
WARN [ProcessBufferProcessor] Unable to process message <dd1fc5d0-2610-11e9-b957-000c2941d251>: java.lang.ClassCastException: org.graylog.plugins.pipelineprocessor.ast.expressions.FunctionExpression cannot be cast to org.graylog.plugins.pipelineprocessor.ast.expressions.LogicalExpression
I refactored pretty much all of the pipelines that messages first get routed into when they get sent into graylog and all appeared to be working as expected, these warning messages seem to have started overnight.
Has anyone got any tips for debugging this without having to crawl through every pipeline and every rule to see if I can spot the issue?
AFAIK since the message failed to process, it isn’t stored in ES so, I can’t open the message up within the web UI to look at what it is/where it went to debug that way.
I did try to access some of the messages that are causing these warnings, just in case I could see them.
I had no luck with accessing them via
Any tips would be much appreciated.