37 views

Description

Wrong Regex may cause Event Processing to freeze.

 

Steps to Reproduce

 

1 - Add this invalid regex     ^([^\s]+)*    for matching fields (on additional info fields).

2 - See in All Events table in Processing Duration column values of 1000+ seconds.

3 - See in ThreadDo the event processing runs the regex parsing:

java.util.regex.Pattern$GroupHead.match(Pattern.java:4168)
java.util.regex.Pattern$Loop.matchInit(Pattern.java:4314)
.......................

java.util.regex.Pattern$Prolog.match(Pattern.java:4251)
java.util.regex.Pattern$Begin.match(Pattern.java:3120)
java.util.regex.Matcher.match(Matcher.java:1127)
java.util.regex.Matcher.matches(Matcher.java:502)
com.glideapp.itom.snac.rules.MatchField.matches(MatchField.java:44)
com.glideapp.itom.snac.rules.MatchRule.matches(MatchRule.java:47)

 

Workaround

Identify and disable the problematic slow event rule with bad regex.

This problem is fixed since Helsinki, where slow event rules get disabled automatically.

 


Related Problem: PRB649747

Seen In

Fuji Patch 12 Hot Fix 1

Fixed In

Helsinki

Associated Community Threads

There is no data to report.

Article Information

Last Updated:2018-07-05 08:11:25
Published:2018-07-05