Skip to content

Commit 5eddfb1

Browse files
authored
Merge pull request #120 from SumoLogic/hpal_nsg_fix
SUMO-244758: NSG flow logs parse ussue
2 parents ddd145a + 46c3448 commit 5eddfb1

File tree

3 files changed

+12
-6
lines changed

3 files changed

+12
-6
lines changed

BlockBlobReader/src/consumer.js

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -354,13 +354,15 @@ function messageHandler(serviceBusTask, context, sumoClient) {
354354
}
355355
if ((file_ext === "json") && (serviceBusTask.containerName === "insights-logs-networksecuritygroupflowevent")) {
356356
// because in json first block and last block remain as it is and azure service adds new block in 2nd last pos
357-
if (serviceBusTask.endByte < JSON_BLOB_HEAD_BYTES + JSON_BLOB_TAIL_BYTES) {
357+
if ((serviceBusTask.endByte < JSON_BLOB_HEAD_BYTES + JSON_BLOB_TAIL_BYTES) || (serviceBusTask.endByte == serviceBusTask.startByte)) {
358358
context.done(); //rejecting first commit when no data is there data will always be atleast HEAD_BYTES+DATA_BYTES+TAIL_BYTES
359359
return;
360360
}
361361
serviceBusTask.endByte -= JSON_BLOB_TAIL_BYTES;
362-
if (serviceBusTask.startByte <= JSON_BLOB_HEAD_BYTES) {
362+
if (serviceBusTask.startByte <= JSON_BLOB_HEAD_BYTES + JSON_BLOB_TAIL_BYTES) {
363363
serviceBusTask.startByte = JSON_BLOB_HEAD_BYTES;
364+
} else {
365+
serviceBusTask.startByte -= 1; //to remove comma before json object
364366
}
365367
file_ext = "nsg";
366368
}

BlockBlobReader/target/consumer_build/BlobTaskConsumer/index.js

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -354,13 +354,15 @@ function messageHandler(serviceBusTask, context, sumoClient) {
354354
}
355355
if ((file_ext === "json") && (serviceBusTask.containerName === "insights-logs-networksecuritygroupflowevent")) {
356356
// because in json first block and last block remain as it is and azure service adds new block in 2nd last pos
357-
if (serviceBusTask.endByte < JSON_BLOB_HEAD_BYTES + JSON_BLOB_TAIL_BYTES) {
357+
if ((serviceBusTask.endByte < JSON_BLOB_HEAD_BYTES + JSON_BLOB_TAIL_BYTES) || (serviceBusTask.endByte == serviceBusTask.startByte)) {
358358
context.done(); //rejecting first commit when no data is there data will always be atleast HEAD_BYTES+DATA_BYTES+TAIL_BYTES
359359
return;
360360
}
361361
serviceBusTask.endByte -= JSON_BLOB_TAIL_BYTES;
362-
if (serviceBusTask.startByte <= JSON_BLOB_HEAD_BYTES) {
362+
if (serviceBusTask.startByte <= JSON_BLOB_HEAD_BYTES + JSON_BLOB_TAIL_BYTES) {
363363
serviceBusTask.startByte = JSON_BLOB_HEAD_BYTES;
364+
} else {
365+
serviceBusTask.startByte -= 1; //to remove comma before json object
364366
}
365367
file_ext = "nsg";
366368
}

BlockBlobReader/target/dlqprocessor_build/DLQTaskConsumer/index.js

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -354,13 +354,15 @@ function messageHandler(serviceBusTask, context, sumoClient) {
354354
}
355355
if ((file_ext === "json") && (serviceBusTask.containerName === "insights-logs-networksecuritygroupflowevent")) {
356356
// because in json first block and last block remain as it is and azure service adds new block in 2nd last pos
357-
if (serviceBusTask.endByte < JSON_BLOB_HEAD_BYTES + JSON_BLOB_TAIL_BYTES) {
357+
if ((serviceBusTask.endByte < JSON_BLOB_HEAD_BYTES + JSON_BLOB_TAIL_BYTES) || (serviceBusTask.endByte == serviceBusTask.startByte)) {
358358
context.done(); //rejecting first commit when no data is there data will always be atleast HEAD_BYTES+DATA_BYTES+TAIL_BYTES
359359
return;
360360
}
361361
serviceBusTask.endByte -= JSON_BLOB_TAIL_BYTES;
362-
if (serviceBusTask.startByte <= JSON_BLOB_HEAD_BYTES) {
362+
if (serviceBusTask.startByte <= JSON_BLOB_HEAD_BYTES + JSON_BLOB_TAIL_BYTES) {
363363
serviceBusTask.startByte = JSON_BLOB_HEAD_BYTES;
364+
} else {
365+
serviceBusTask.startByte -= 1; //to remove comma before json object
364366
}
365367
file_ext = "nsg";
366368
}

0 commit comments

Comments
 (0)