Skip to content

Instantly share code, notes, and snippets.

# ausearch -ts recent -m avc
----
time->Tue Feb 23 20:09:26 2016
type=SYSCALL msg=audit(1456258166.390:135): arch=c000003e syscall=2 success=no exit=-13 a0=7ffc5ab7df59 a1=80000 a2=1b6 a3=21000 items=0 ppid=1033 pid=13577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
type=AVC msg=audit(1456258166.390:135): avc: denied { open } for pid=13577 comm="iptables-restor" path="/tmp/kube-temp-iptables-restore-850979159" dev="vda1" ino=16818306 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
----
time->Tue Feb 23 20:09:26 2016
type=SYSCALL msg=audit(1456258166.453:137): arch=c000003e syscall=2 success=no exit=-13 a0=7ffc5a3a5f59 a1=80000 a2=1b6 a3=21000 items=0 ppid=1033 pid=13584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtable
[2016-10-13 15:30:04,779][DEBUG][io.fabric8.elasticsearch.plugin.acl.DynamicACLFilter] [Ringer] Handling Request...
[2016-10-13 15:30:04,779][DEBUG][io.fabric8.elasticsearch.plugin.acl.DynamicACLFilter] [Ringer] Evaluating request for user '' with a empty token
[2016-10-13 15:30:04,779][DEBUG][io.fabric8.elasticsearch.plugin.acl.DynamicACLFilter] [Ringer] Cache has user: false
[2016-10-13 15:30:04,779][DEBUG][io.fabric8.elasticsearch.plugin.KibanaUserReindexFilter] Handling Request in Kibana User Reindex filter...
[2016-10-13 15:30:04,779][DEBUG][io.fabric8.elasticsearch.plugin.KibanaUserReindexFilter] Received user '' and index '', checking for kibana index '.kibana'
[2016-10-13 15:30:04,807][DEBUG][io.fabric8.elasticsearch.plugin.acl.DynamicACLFilter] [Ringer] Handling Request...
[2016-10-13 15:30:04,807][DEBUG][io.fabric8.elasticsearch.plugin.acl.DynamicACLFilter] [Ringer] Evaluating request for user '' with a empty token
[2016-10-13 15:30:04,807][DEBUG][io.fabric8.elasticsearch.plugin.acl.DynamicACLFilter
@richm
richm / esdups.json
Created February 7, 2017 18:43
es duplicates
{
"_id": "AVoZ0Rq0x2ogvT0Q6AbG",
"_index": "project.this-is-project-04.namespaceid.2017.02.07",
"_score": 1.0,
"_source": {
"@timestamp": "2017-02-07T18:22:52.933911+00:00",
"UNKNOWN1": "1",
"UNKNOWN2": "2",
"hostname": "localhost",
"kubernetes": {
/home/rmeggins/viaq/watches-cli(master)>python --version
Python 2.7.13
/home/rmeggins/viaq/watches-cli(master)>python3 --version
Python 3.5.3
/home/rmeggins/viaq/watches-cli(master)>rpm -qa|grep virtualenv
python2-virtualenv-15.0.3-2.fc25.noarch
/home/rmeggins/viaq/watches-cli(master)>virtualenv --python=python3 .venv
Running virtualenv with interpreter /usr/bin/python3
Using base prefix '/usr'
New python executable in /home/rmeggins/viaq/watches-cli/.venv/bin/python3
Patch watches/cli.py with iteritems
(Dry run: don't modify files)
WARNING: [print] watches/cli.py: -l Single line output (no pretty-print JSON formatting).
WARNING: [print] watches/cli.py: # print duration, interval, startsec, actualsec, endsec
Patch watches/commands/base.py with print
WARNING: [print] watches/commands/base.py: print 'Supplied options:', dumps(self.options, indent=2, sort_keys=True)
WARNING: [print] watches/commands/base.py: print dumps(data, default=lambda x:str(x))
WARNING: [print] watches/commands/base.py: print dumps(data, indent=2, sort_keys=False, default=lambda x:str(x))
WARNING: watches/util/ESClientProducer.py: Failed to find the best place to add
working version - current openshift-ansible master:
[2017-05-05 18:40:23,866][INFO ][node ] [Lurking Unknown] initialized
[2017-05-05 18:40:23,867][INFO ][node ] [Lurking Unknown] starting ...
[2017-05-05 18:40:23,997][INFO ][discovery ] [Lurking Unknown] logging-es/0z187lAmQJeRtwt8_l_IYw
.....[2017-05-05 18:40:28,489][INFO ][cluster.service ] [Lurking Unknown] new_master {Lurking Unknown}{0z187lAmQJeRtwt8_l_IYw}{172.17.0.3}{172.17.0.3:9300}{master=true}, reason: zen-disco-join(elected_as_master, [0] joins received)
[2017-05-05 18:40:28,703][INFO ][http ] [Lurking Unknown] publish_address {172.17.0.3:9200}, bound_addresses {[::]:9200}
[2017-05-05 18:40:28,703][INFO ][node ] [Lurking Unknown] started
# add loggingPublicURL so the OpenShift UI Console will include a link for Kibana
# this part stolen from util.sh configure_os_server()
cp ${SERVER_CONFIG_DIR}/master/master-config.yaml ${SERVER_CONFIG_DIR}/master/master-config.orig.yaml
openshift ex config patch ${SERVER_CONFIG_DIR}/master/master-config.orig.yaml \
--patch="{\"assetConfig\": {\"loggingPublicURL\": \"https://${KIBANA_HOST}\"}}" > \
${SERVER_CONFIG_DIR}/master/master-config.yaml
diff --git a/oshift-oct-new-dev.sh b/oshift-oct-new-dev.sh
index a37cded..ba1640c 100755
--- a/oshift-oct-new-dev.sh
+++ b/oshift-oct-new-dev.sh
@@ -56,7 +56,7 @@ if [ ! -d .venv ] ; then
fi
PS1=unused
source .venv/bin/activate
-NO_SKIP=1
+#NO_SKIP=1
[openshift/origin-logging-elasticsearch] [ERROR] Failed to execute goal org.apache.maven.plugins:maven-dependency-plugin:2.8:get (default-cli) on project standalone-pom: Couldn't download artifact: Missing:
[openshift/origin-logging-elasticsearch] [ERROR] ----------
[openshift/origin-logging-elasticsearch] [ERROR] 1) io.fabric8.elasticsearch:openshift-elasticsearch-plugin:jar:2.4.4.20
[openshift/origin-logging-elasticsearch] [ERROR]
[openshift/origin-logging-elasticsearch] [ERROR] Try downloading the file manually from the project website.
[openshift/origin-logging-elasticsearch] [ERROR]
[openshift/origin-logging-elasticsearch] [ERROR] Then, install it using the command:
[openshift/origin-logging-elasticsearch] [ERROR] mvn install:install-file -DgroupId=io.fabric8.elasticsearch -DartifactId=openshift-elasticsearch-plugin -Dversion=2.4.4.20 -Dpackaging=jar -Dfile=/path/to/file
{
"docker": {
"container_id": "883be7c284ab6f2154b01d18ae281acde26a3b890c22166f53260f95e6b67625"
},
"kubernetes": {
"container_name": "webconsole",
"namespace_name": "openshift-web-console",
"pod_name": "webconsole-6668f9fd47-bppt2",
"pod_id": "36167d54-05eb-11e8-9f6e-0edd975df7d8",
"labels": {