You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Logstash version (e.g. bin/logstash --version)
8.13.4 (also tested with docker tag 8.15.0)
Logstash installation source (e.g. built from source, with a package manager: DEB/RPM, expanded from tar or zip archive, docker) docker image
How is Logstash being run (e.g. as a service/service manager: systemd, upstart, etc. Via command line, docker/kubernetes)
docker entrypoint runs logstash from command line
How was the Logstash Plugin installed
Dockerfile RUN directive: RUN logstash-plugin install logstash-input-rss
JVM (e.g. java -version):
cd /jdk/bin/
./java --version
openjdk 17.0.11 2024-04-16
OpenJDK Runtime Environment Temurin-17.0.11+9 (build 17.0.11+9)
OpenJDK 64-Bit Server VM Temurin-17.0.11+9 (build 17.0.11+9, mixed mode, sharing)
on 8.15.0
openjdk 21.0.4 2024-07-16 LTS
OpenJDK Runtime Environment Temurin-21.0.4+7 (build 21.0.4+7-LTS)
OpenJDK 64-Bit Server VM Temurin-21.0.4+7 (build 21.0.4+7-LTS, mixed mode, sharing)
In both cases the plugin version: logstash-input-rss (3.0.6)
Description of the problem including expected versus actual behavior:
The plugin is generating TooMuchTag errors on a specific RSS feed.
Uknown error while parsing the feed {:url=>"https://cloudblog.withgoogle.com/topics/threat-intelligence/rss/", :exception=>#<RSS::TooMuchTagError: tag <title> is too much in tag <item>>}
Inspecting the RSS feed directly, the <title> tag only exists as child of the <item> tag once per item. However, each item also has a child tag of <og> that contains it's own child <title> tag. If the object is as:
Please include a minimal but complete recreation of the problem,
including (e.g.) pipeline definition(s), settings, locale, etc. The easier
you make for us to reproduce it, the more likely that somebody will take the
time to look at it.
Uknown error while parsing the feed {:url=>"https://cloudblog.withgoogle.com/topics/threat-intelligence/rss/", :exception=>#<RSS::TooMuchTagError: tag <title> is too much in tag <item>>}
The text was updated successfully, but these errors were encountered:
The above comment asking you to download a file is malware to steal your account; do not under any circumstances download or run it. The post needs to be removed. If you have attempted to run it please have your system cleaned and your account secured immediately.
Logstash information:
Please include the following information:
bin/logstash --version
)8.13.4 (also tested with docker tag 8.15.0)
docker image
docker entrypoint runs logstash from command line
Dockerfile RUN directive:
RUN logstash-plugin install logstash-input-rss
JVM (e.g.
java -version
):on 8.15.0
In both cases the plugin version: logstash-input-rss (3.0.6)
Description of the problem including expected versus actual behavior:
The plugin is generating TooMuchTag errors on a specific RSS feed.
I found the error message exists within the Ruby Gem https://github.com/ruby/rss/.
Inspecting the RSS feed directly, the
<title>
tag only exists as child of the<item>
tag once per item. However, each item also has a child tag of<og>
that contains it's own child<title>
tag. If the object is as:then:
Expected Behavior
The second title tag is not a direct child of item, it's a child of og and should not cause this error.
Steps to reproduce:
Run logstash with an rss input:
Please include a minimal but complete recreation of the problem,
including (e.g.) pipeline definition(s), settings, locale, etc. The easier
you make for us to reproduce it, the more likely that somebody will take the
time to look at it.
Provide logs (if relevant):
The text was updated successfully, but these errors were encountered: