Uploaded image for project: 'Observium'
  1. Observium
  2. OBS-2797

Apache Bad Request for ASA Syslog filtering by program

Details

    • Bug
    • Resolution: Unresolved
    • Minor
    • None
    • Professional Edition
    • Web Interface

    Description

      Hello,

       

      While trying to filter Syslog for ASAs by program, I receive a 400 Bad Request from Apache.

      I was able to figure out that it's due to somehow broken quoting of "%" sign used in the ASA's Syslog program and the issue may be related to Observium's URL Rewrite scheme.

      Screens of the error are in the attachment. If you need any more info, please ask.

      Attachments

        1. syslog-1.jpg
          syslog-1.jpg
          793 kB
        2. syslog-2.jpg
          syslog-2.jpg
          128 kB

        Activity

          [OBS-2797] Apache Bad Request for ASA Syslog filtering by program
          landy Mike Stupalov made changes -
          Labels Original: interface web New: interface syslog web
          landy Mike Stupalov made changes -
          Status Original: Pending Response [ 10000 ] New: In Review [ 10101 ]
          docn@stoloto.ru Telecom Support added a comment -

          Hi, Mike!

          I've tried to restart (actually kill) syslog.php, restart rsyslog, even rebooted the Observium machine - nothing actually helped.

          Can you name what debugs can I attach in order to resolve it?

          docn@stoloto.ru Telecom Support added a comment - Hi, Mike! I've tried to restart (actually kill) syslog.php, restart rsyslog, even rebooted the Observium machine - nothing actually helped. Can you name what debugs can I attach in order to resolve it?
          landy Mike Stupalov made changes -
          Assignee Original: Adam Armstrong [ adama ] New: Mike Stupalov [ landy ]
          landy Mike Stupalov made changes -
          Status Original: Open [ 1 ] New: Pending Response [ 10000 ]
          landy Mike Stupalov added a comment -

          Hrm, this syslog messages should be parsed without % in program.

          Try restart rsyslog service.

          landy Mike Stupalov added a comment - Hrm, this syslog messages should be parsed without % in program. Try restart rsyslog service.
          docn@stoloto.ru Telecom Support created issue -

          People

            landy Mike Stupalov
            docn@stoloto.ru Telecom Support
            Votes:
            1 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: