Fixed the list issue and now the miner is showing 111 indicators
The final configuration of the miner is
pingdom_nodes-US:
class: minemeld.ft.json.SimpleJSON
config:
age_out:
default: null
interval: 257
sudden_death: true
attributes:
confidence: 100
share_level: green
type: IPv4
interval: 3600
extractor: probes
fields:
- id
- country
- city
- name
- active
- hostname
- ip
- countryiso
headers:
Authorization: Basic <base64>
App-Key: <app-key>
indicator: ip
outfilters:
- actions:
- accept
conditions:
- countryiso == 'US'
name: accept US
- actions:
- drop
name: drop all
url: https://api.pingdom.com/api/2.1/probes
description: Pingdom nodes
development_status: STABLE
indicator_types:
- IPv4
node_type: miner
tags:
- ConfidenceHigh
- ShareLevelGreen
The problem now is that neither the aggregator nor the feed have any entries.
What is confusing is that if I pull the data via curl, I see output like this:
{"probes":[{"id":36,"country":"United States","city":"Chicago","name":"Chicago, IL","active":true,"hostname":"s414.pingdom.com","ip":"174.34.156.130","countryiso":"US","region":"NA"},
{"id":43,"country":"United States","city":"Denver","name":"Denver, CO","active":true,"hostname":"s421.pingdom.com","ip":"173.248.147.18","countryiso":"US","ipv6":"2607:fc88:100:26::421","region":"NA"},
{"id":47,"country":"Austria","city":"Vienna","name":"Vienna, Austria","active":true,"hostname":"s425.pingdom.com","ip":"178.255.152.2","countryiso":"AT","ipv6":"2a00:11c0:d:3::425","region":"EU"},
In the logs for the miner though, I see
{
"_age_out": 4294967295000,
"confidence": 100,
"json_hostname": "s4054.pingdom.com",
"json_country": "South Korea",
"share_level": "green",
"json_ip": "169.56.174.147",
"_last_run": 1548903839226,
"json_city": "Seoul",
"sources": [
"pingdom_nodes-US"
],
"json_name": "Seoul",
"json_active": false,
"json_id": 259,
"first_seen": 1548903839226,
"json_countryiso": "KR",
"type": "IPv4",
"json_region": "APAC",
"last_seen": 1548903839226
}
If I change the field names in the miner to "json_*", the miner shows 0 indicators.
My aggregator looks like this
The feed looks like this
Thank you in advance.
Mike
... View more
