topic Re: ML gets stuck at "Ready" in Expedition Discussions

ML gets stuck at "Ready"

MartinMalek — Mon, 20 Jul 2020 12:09:31 GMT

Hello all,

i'm trying to use ML but for some reason i cannot process the data. I've managed to export the data to the Expedition but as you can see the process option is not available. Any idea ?

drwxrwxr-x 2 www-data www-data 4096 Jun 25 11:38 data

drwxrwxrwx 2 expedition expedition 4096 Jul 20 12:32 logs

Re: ML gets stuck at "Ready"

azuniga — Mon, 20 Jul 2020 14:29:15 GMT

Can you please send a screenshot of the folder permissions where these log files live (via CLI)? Expedition may not have the proper permissions to parse these files.

Re: ML gets stuck at "Ready"

MartinMalek — Mon, 20 Jul 2020 17:41:22 GMT

I have described it in my original post. I have using 2 folder - logs & data

Re: ML gets stuck at "Ready"

azuniga — Mon, 20 Jul 2020 21:55:43 GMT

The folder that stores these logs requires privs to make the changes after these ML logs have been parsed. You will need to change folder permissions to achieve this.

sudo chown -R www-data:expedition ./logs

Once that is done all new logs brought into this folder should have the proper permissions to be parsed and either "deleted" or "compressed". Also the existing files more than likely were also saved wrong so you will need to make the proper file permissions and rerun it.

Re: ML gets stuck at "Ready"

MartinMalek — Tue, 21 Jul 2020 09:02:04 GMT

drwxrwxrwx 2 www-data expedition 4096 Jul 20 23:15 logs

I have changed folder permissions and i've added there new log file. Nothing changed.

Re: ML gets stuck at "Ready"

azuniga — Tue, 21 Jul 2020 15:24:37 GMT

The new log file that was imported shows the same ownership "www-data:expedition"?

Re: ML gets stuck at "Ready"

MartinMalek — Wed, 22 Jul 2020 07:03:29 GMT

it's weird, because some logs are correct but new ones from yesterday are still expedition:expedition

-rw-rw-r-- 1 www-data expedition 1141518509 Jul 20 16:49 xyz.csv
-rw-rw-r-- 1 expedition expedition 1394700274 Jul 21 16:53 xyz.csv

i cannot process both

Re: ML gets stuck at "Ready"

azuniga — Wed, 22 Jul 2020 17:19:29 GMT

If this is in relation to your other forum post then you will need to follow what Didac mentioned.

https://live.paloaltonetworks.com/t5/expedition-discussions/ml-gets-stuck-at-quot-pending-quot/td-p/224493/page/2

Yes, to answer your question on page 3 you will need to add the firewall in separately.

Re: ML gets stuck at "Ready"

MartinMalek — Mon, 27 Jul 2020 11:49:56 GMT

not i can see that the folder logs has following permissions - drwxrwxrwx 2 www-data expedition 4096 Jul 27 12:14 logs, but the new logs has are still " -rw-rw-r-- 1 expedition expedition xzy.csv "