Comment 8 for bug 1548745

Revision history for this message
Matthew B (utdrmac) wrote : Re: [Bug 1548745] Re: audit_log json is not escaping characters properly

Hi Alessandro,
You must be missing some library either during the compile phase or on the host to which you are installing the plugin.

Do a search for that missing library and see which package provides it.

Can you provide your compile steps?

-Matthew

Sent from my iPhone 6S! Please excuse shorthnd and typoes.

> On Dec 1, 2016, at 8:06 AM, Alle <email address hidden> wrote:
>
> Server version: 5.7.16 MySQL Community Server (GPL)
>
> dpkg -l | grep mysql
> ii libmysqlclient-dev 5.7.16-1ubuntu14.04 amd64 MySQL development headers
> ii libmysqlclient20:amd64 5.7.16-1ubuntu14.04 amd64 MySQL shared client libraries
> ii mysql-client 5.7.16-1ubuntu14.04 amd64 MySQL Client meta package depending on latest version
> ii mysql-common 5.7.16-1ubuntu14.04 amd64 MySQL Common
> ii mysql-community-client 5.7.16-1ubuntu14.04 amd64 MySQL Client
> ii mysql-community-server 5.7.16-1ubuntu14.04 amd64 MySQL Server
>
> --
> You received this bug notification because you are subscribed to a
> duplicate bug report (1642375).
> https://bugs.launchpad.net/bugs/1548745
>
> Title:
> audit_log json is not escaping characters properly
>
> Status in Percona Server:
> Triaged
> Status in Percona Server 5.5 series:
> Triaged
> Status in Percona Server 5.6 series:
> Triaged
> Status in Percona Server 5.7 series:
> Triaged
>
> Bug description:
> Hello,
>
> On logstash reading the audit_log, I receive this error message with
> some audit_log entries:
>
> {:timestamp=>"2016-02-22T06:37:55.645000+0000", :message=>"JSON parse failure. Falling back to plain-text", :error=>#<LogStash::Json::ParserError: Illegal unquoted character ((CTRL-CHAR, code 9)): has to be escaped using backslash to be included in string value
> at [Source: [B@53033860; line: 1, column: 344]>, :data=>"{\"audit_record\":{\"name\":\"Query\",\"record\":\"289492725_2016-02-17T11:18:32\",\"timestamp\":\"2016-02-22T06:37:54 UTC\",\"command_class\":\"insert\",\"connection_id\":\"97602\",\"status\":0,\"sqltext\":\"INSERT INTO XXXXX (ID, MESSAGE_ID, SERVER_ID, RECEIVED_DATE, STATUS, CONNECTOR_NAME, SEND_ATTEMPTS, SEND_DATE, RESPONSE_DATE, ERROR_CODE, CHAIN_ID, ORDER_ID)\\n\t\tVALUES (0, 742570, 'f8d013f6-1a85-41ea-a54d-79a216a62141', '2016-02-22 06:37:54.691', 'R', 'Source', 0, null, null, 0, 0, 0)\",\"user\":\"user[user] @ host.com\",\"host\":\"host.com\",\"os_user\":\"\",\"ip\":\"10.0.1.203\"}}", :level=>:error}
>
>
> This is running on mysql 5.7.7 and the latest audit_log plugin.
>
> mysqld Ver 5.7.11 for Linux on x86_64 (MySQL Community Server (GPL))
> Linux db5 3.13.0-76-generic #120-Ubuntu SMP Mon Jan 18 15:59:10 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
>
>
> Regards
> Alessandro
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/percona-server/+bug/1548745/+subscriptions