Grok patterns defined twice


#1

Hello,
All grok patterns are defined twice in my Graylog (System --> Grok Patterns).
Is it normal or is it a bug ?
Must I delete all duplicated entries ?


How to mass delete duplicate GROK patterns?
(Jochen) #2

Please check the “grok_patterns” collection in the MongoDB database used by Graylog for duplicate entries.

While this should not happen, I won’t rule out a bug in importing Grok patterns.


#3

This collection contains all grok patterns twice.
For example:

db.grok_patterns.find({“name”:“USER”})
{ “_id” : ObjectId(“59aec58243c5805fee919331”), “name” : “USER”, “pattern” : “%{USERNAME}”, “content_pack” : “59aec58243c5805fee9192e5” }
{ “_id” : ObjectId(“59f0ab2143c58073b646bcf6”), “name” : “USER”, “pattern” : “%{USERNAME}”, “content_pack” : “59aec58243c5805fee9192e5” }

I was in Graylog 2.3.1 and I updated to 2.3.2, it may introduced this bug.


(system) #4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.