From f2088a505ab9b67055711dce489bd5f73e4d2a3b Mon Sep 17 00:00:00 2001 From: Chip Gwyn Date: Wed, 24 Jan 2018 04:18:28 -0500 Subject: [PATCH] fix: Palo Alto HA Alert Rule references non-existent column in sensors table (#8138) column in the sensors table. However there is no "type" column. This should be "sensor_type". This is indicated by the error in the logs: `MySQL Error: Unknown column 'sensors.type' in 'where clause' (SELECT * FROM devices,sensors WHERE (( sensors.device_id = devices.device_id ) && devices.device_id = '102') && (devices.os = "panos" & sensors.type = "panSysHAState" && sensors.sensor_current = "1" && sensors.sensor_prev = "2" )) ` Updated the rule to reference the correct column. --- misc/alert_rules.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/misc/alert_rules.json b/misc/alert_rules.json index 6010802ca4..5b4dc241e4 100644 --- a/misc/alert_rules.json +++ b/misc/alert_rules.json @@ -277,7 +277,7 @@ "name": "Cisco NX-OS device has a bad fan" }, { - "rule": "%devices.os = \"panos\" & %sensors.type = \"panSysHAState\" && %sensors.sensor_current = \"1\" && %sensors.sensor_prev = \"2\"", + "rule": "%devices.os = \"panos\" & %sensors.sensor_type = \"panSysHAState\" && %sensors.sensor_current = \"1\" && %sensors.sensor_prev = \"2\"", "name": "Palo Alto Networks passive firewall changed to active" }, {