Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NoMethodError) undefined method `test_for_inclusion' for nil:NilClass", :exception=>Java::OrgJrubyExceptions::NoMethodError, #102

Open
hunter32me opened this issue Nov 6, 2024 · 0 comments
Labels

Comments

@hunter32me
Copy link

Logstash information:

Please include the following information:

  1. Logstash version (e.g. bin/logstash --version) 8.12.2
  2. Logstash installation source (e.g. built from source, with a package manager: DEB/RPM, expanded from tar or zip archive, docker) Yum
  3. How is Logstash being run (e.g. as a service/service manager: systemd, upstart, etc. Via command line, docker/kubernetes) - Systemd
  4. How was the Logstash Plugin installed with logstash

JVM (e.g. java -version): Built in Java

If the affected version of Logstash is 7.9 (or earlier), or if it is NOT using the bundled JDK or using the 'no-jdk' version in 7.10 (or higher), please provide the following information:

  1. JVM version (java -version)
  2. JVM installation source (e.g. from the Operating System's package manager, from source, etc).
  3. Value of the JAVA_HOME environment variable if set.

OS version (uname -a if on a Unix-like system):

looks like translate is being pass a nilClass for test_for_inclustion causing the Logstash pipeline to die

Description of the problem including expected versus actual behavior:
[2024-09-27T02:21:12,123][ERROR][logstash.javapipeline ][corelight_ecs] Pipeline worker error, the pipeline will be stopped {:pipeline_id=>"corelight_ecs", :error=>"(NoMethodError) undefined method `test_for_inclusion' for nil:NilClass", :exception=>Java::OrgJrubyExceptions::NoMethodError, :backtrace=>["usr.share.logstash.vendor.bundle.jruby.$3_dot_1_dot_0.gems.logstash_minus_filter_minus_translate_minus_3_dot_4_dot_2.lib.logstash.filters.translate.filter(/usr/share/logstash/vendor/bundle/jruby/3.1.0/gems/logstash-filter-translate-3.4.2/lib/logstash/filters/translate.rb:261)", "usr.share.logstash.logstash_minus_core.lib.logstash.filters.base.do_filter(/usr/share/logstash/logstash-core/lib/logstash/filters/base.rb:158)", "usr.share.logstash.logstash_minus_core.lib.logstash.filters.base.multi_filter(/usr/share/logstash/logstash-core/lib/logstash/filters/base.rb:176)", "org.jruby.RubyArray.each(org/jruby/RubyArray.java:1989)", "usr.share.logstash.logstash_minus_core.lib.logstash.filters.base.multi_filter(/usr/share/logstash/logstash-core/lib/logstash/filters/base.rb:173)", "org.logstash.config.ir.compiler.AbstractFilterDelegatorExt.multi_filter(org/logstash/config/ir/compiler/AbstractFilterDelegatorExt.java:133)", "RUBY.start_workers(/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:304)"], :thread=>"#<Thread:0x245a6985 /usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:134 sleep>"}

[2024-09-27T02:21:12,147][WARN ][logstash.javapipeline ][corelight_ecs] Waiting for input plugin to close {:pipeline_id=>"corelight_ecs", :thread=>"#<Thread:0x245a6985 /usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:134 run>"}

[2024-09-27T02:21:14,012][INFO ][logstash.javapipeline ][corelight_ecs] Pipeline terminated {"pipeline.id"=>"corelight_ecs"}
Steps to reproduce:

Please include a minimal but complete recreation of the problem,
including (e.g.) pipeline definition(s), settings, locale, etc. The easier
you make for us to reproduce it, the more likely that somebody will take the
time to look at it.

Full pipeline is at https://github.com/corelight/ecs-logstash-mappings

Provide logs (if relevant):

@hunter32me hunter32me added the bug label Nov 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant