Graylog2 / Graylog2/graylog2-server

A lot of false negative events

Open
#6,601 1 comment 0 reactions 0 assignees View on GitHub
alerting to-verify
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

I've a lot of false negative events with count condition.

## Expected Behavior

No any triggered events.

## Current Behavior

This event occurs several times a day.

## Possible Solution

Fix the problem/

## Steps to Reproduce (for bugs)

Condition Type: Filter & Aggregation
Search Query: *
Search within the last: 30 minutes
Execute search every: 10 minutes
Aggregation of results reaches a threshold
If `count()` Is `<` Threshold `1`

Graylog - Search 2019-10-16 16-21-53

## Context

The problem didn't exists before upgrade to graylog 3.

## Your Environment

* Graylog Version: `3.1.2 (graylog/graylog:3.1)`
* Elasticsearch Version: `docker.elastic.co/elasticsearch/elasticsearch-oss:6.8.3`
* MongoDB Version: `mongo:4.0`
* Operating System: Docker on Ubuntu 18.04
* Browser version: Netscape navigator

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.