Hi Alessandro,
You must be missing some library either during the compile phase or on the host to which you are installing the plugin.
Do a search for that missing library and see which package provides it.
Can you provide your compile steps?
-Matthew
Sent from my iPhone 6S! Please excuse shorthnd and typoes.
> On Dec 1, 2016, at 8:06 AM, Alle <email address hidden> wrote:
>
> Server version: 5.7.16 MySQL Community Server (GPL)
>
> dpkg -l | grep mysql
> ii libmysqlclient-dev 5.7.16-1ubuntu14.04 amd64 MySQL development headers
> ii libmysqlclient20:amd64 5.7.16-1ubuntu14.04 amd64 MySQL shared client libraries
> ii mysql-client 5.7.16-1ubuntu14.04 amd64 MySQL Client meta package depending on latest version
> ii mysql-common 5.7.16-1ubuntu14.04 amd64 MySQL Common
> ii mysql-community-client 5.7.16-1ubuntu14.04 amd64 MySQL Client
> ii mysql-community-server 5.7.16-1ubuntu14.04 amd64 MySQL Server
>
> --
> You received this bug notification because you are subscribed to a
> duplicate bug report (1642375).
> https://bugs.launchpad.net/bugs/1548745
>
> Title:
> audit_log json is not escaping characters properly
>
> Status in Percona Server:
> Triaged
> Status in Percona Server 5.5 series:
> Triaged
> Status in Percona Server 5.6 series:
> Triaged
> Status in Percona Server 5.7 series:
> Triaged
>
> Bug description:
> Hello,
>
> On logstash reading the audit_log, I receive this error message with
> some audit_log entries:
>
> {:timestamp=>"2016-02-22T06:37:55.645000+0000", :message=>"JSON parse failure. Falling back to plain-text", :error=>#<LogStash::Json::ParserError: Illegal unquoted character ((CTRL-CHAR, code 9)): has to be escaped using backslash to be included in string value
> at [Source: [B@53033860; line: 1, column: 344]>, :data=>"{\"audit_record\":{\"name\":\"Query\",\"record\":\"289492725_2016-02-17T11:18:32\",\"timestamp\":\"2016-02-22T06:37:54 UTC\",\"command_class\":\"insert\",\"connection_id\":\"97602\",\"status\":0,\"sqltext\":\"INSERT INTO XXXXX (ID, MESSAGE_ID, SERVER_ID, RECEIVED_DATE, STATUS, CONNECTOR_NAME, SEND_ATTEMPTS, SEND_DATE, RESPONSE_DATE, ERROR_CODE, CHAIN_ID, ORDER_ID)\\n\t\tVALUES (0, 742570, 'f8d013f6-1a85-41ea-a54d-79a216a62141', '2016-02-22 06:37:54.691', 'R', 'Source', 0, null, null, 0, 0, 0)\",\"user\":\"user[user] @ host.com\",\"host\":\"host.com\",\"os_user\":\"\",\"ip\":\"10.0.1.203\"}}", :level=>:error}
>
>
> This is running on mysql 5.7.7 and the latest audit_log plugin.
>
> mysqld Ver 5.7.11 for Linux on x86_64 (MySQL Community Server (GPL))
> Linux db5 3.13.0-76-generic #120-Ubuntu SMP Mon Jan 18 15:59:10 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
>
>
> Regards
> Alessandro
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/percona-server/+bug/1548745/+subscriptions
Hi Alessandro,
You must be missing some library either during the compile phase or on the host to which you are installing the plugin.
Do a search for that missing library and see which package provides it.
Can you provide your compile steps?
-Matthew
Sent from my iPhone 6S! Please excuse shorthnd and typoes.
> On Dec 1, 2016, at 8:06 AM, Alle <email address hidden> wrote: 0:amd64 5.7.16-1ubuntu14.04 amd64 MySQL shared client libraries -client 5.7.16-1ubuntu14.04 amd64 MySQL Client -server 5.7.16-1ubuntu14.04 amd64 MySQL Server /bugs.launchpad .net/bugs/ 1548745 >"2016- 02-22T06: 37:55.645000+ 0000", :message=>"JSON parse failure. Falling back to plain-text", :error= >#<LogStash: :Json:: ParserError: Illegal unquoted character ((CTRL-CHAR, code 9)): has to be escaped using backslash to be included in string value "{\"audit_ record\ ":{\"name\ ":\"Query\ ",\"record\ ":\"289492725_ 2016-02- 17T11:18: 32\",\" timestamp\ ":\"2016- 02-22T06: 37:54 UTC\",\ "command_ class\" :\"insert\ ",\"connection_ id\":\" 97602\" ,\"status\ ":0,\"sqltext\ ":\"INSERT INTO XXXXX (ID, MESSAGE_ID, SERVER_ID, RECEIVED_DATE, STATUS, CONNECTOR_NAME, SEND_ATTEMPTS, SEND_DATE, RESPONSE_DATE, ERROR_CODE, CHAIN_ID, ORDER_ID) \\n\t\tVALUES (0, 742570, 'f8d013f6- 1a85-41ea- a54d-79a216a621 41', '2016-02-22 06:37:54.691', 'R', 'Source', 0, null, null, 0, 0, 0)\",\" user\": \"user[ user] @ host.com\ ",\"host\ ":\"host. com\",\ "os_user\ ":\"\", \"ip\": \"10.0. 1.203\" }}", :level=>:error} /bugs.launchpad .net/percona- server/ +bug/1548745/ +subscriptions
>
> Server version: 5.7.16 MySQL Community Server (GPL)
>
> dpkg -l | grep mysql
> ii libmysqlclient-dev 5.7.16-1ubuntu14.04 amd64 MySQL development headers
> ii libmysqlclient2
> ii mysql-client 5.7.16-1ubuntu14.04 amd64 MySQL Client meta package depending on latest version
> ii mysql-common 5.7.16-1ubuntu14.04 amd64 MySQL Common
> ii mysql-community
> ii mysql-community
>
> --
> You received this bug notification because you are subscribed to a
> duplicate bug report (1642375).
> https:/
>
> Title:
> audit_log json is not escaping characters properly
>
> Status in Percona Server:
> Triaged
> Status in Percona Server 5.5 series:
> Triaged
> Status in Percona Server 5.6 series:
> Triaged
> Status in Percona Server 5.7 series:
> Triaged
>
> Bug description:
> Hello,
>
> On logstash reading the audit_log, I receive this error message with
> some audit_log entries:
>
> {:timestamp=
> at [Source: [B@53033860; line: 1, column: 344]>, :data=>
>
>
> This is running on mysql 5.7.7 and the latest audit_log plugin.
>
> mysqld Ver 5.7.11 for Linux on x86_64 (MySQL Community Server (GPL))
> Linux db5 3.13.0-76-generic #120-Ubuntu SMP Mon Jan 18 15:59:10 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
>
>
> Regards
> Alessandro
>
> To manage notifications about this bug go to:
> https:/