Bug #7775
open
Event aggregation in reports seems broken (recurrence mechanism)
Added by Radko Krkoš 13 days ago.
Updated 1 day ago.
Just a note: Numbering of entries resets for the recurring events section. I think it makes sense, as the two sections are visually separated by a text.
- Assignee set to Jakub Judiny
- Target version changed from Backlog to 2.13.2
- Related to Bug #7759: Reporter doesn't update thresholds in some cases added
- Status changed from New to Resolved
- Status changed from Resolved to Feedback
Is that really an issue?
On 30 Aug at 18:20, this report was created. Consequently, a new record was created in the thresholding table.
2024-08-30 18:20:18,880 mentat-reporter.py [1359799] INFO: Updated thresholding cache with record - TTL=2024-09-05T16:20:00|RLP=2024-09-03T16:20:00|THR=2024-08-30T16:20:00|KEY=recon-scanning+++2001:xxxxxxxxxxxxxxxxxxxxxxx
Then every day at 18:20, mentat-reporter checked the events from the previous 24 hours and thresholded the ones with the same event class and source IP address.
On 5 Sep at 18:20, thresholding period ended. Instead of thresholding the events found within the last 24 hours (4 Sep 18:20 - 5 Sep 18:20), those events were marked to be sent. Additionally, all thresholded events up to that moment (until 4 Sep 18:20) were retrieved from the database and sent together with those new events.
- Status changed from Feedback to In Review
Also available in: Atom
PDF