e0a24854ac
The logstash UI will return hits on wildcarded queries but the ElasticSearch configuration by default disables wildcard analysis so queries in elastic-recheck with wildcards currently do not work, so let's make sure this is documented in the readme. Related-Bug: #1266833 Change-Id: If6b9d99d7ba83272fc8b735ab9e67fe1ee993811
88 lines
3.6 KiB
ReStructuredText
88 lines
3.6 KiB
ReStructuredText
===============================
|
|
elastic-recheck
|
|
===============================
|
|
|
|
"Use ElasticSearch to classify OpenStack gate failures"
|
|
|
|
* Open Source Software: Apache license
|
|
* Documentation: http://docs.openstack.org/developer/elastic-recheck
|
|
|
|
Idea
|
|
----
|
|
Identifying the specific bug that is causing a transient error in the gate
|
|
is very hard. Just identifying which tempest test failed is not enough
|
|
because a single bug can potentially cause multiple tempest tests to fail.
|
|
If we can find a fingerprint for a specific bug using logs, then we can use
|
|
ElasticSearch to automatically detect any occurrences of the bug.
|
|
|
|
Using these fingerprints elastic-recheck can:
|
|
|
|
* Search ElasticSearch for all occurrences of a bug.
|
|
* Identify bug trends such as: when it started, is the bug fixed, is it
|
|
getting worse, etc.
|
|
* Classify bug failures in real time and report back to gerrit if we find a
|
|
match, so a patch author knows why the test failed.
|
|
|
|
queries/
|
|
--------
|
|
|
|
All queries are stored in separate yaml files in a queries directory
|
|
at the top of the elastic-recheck code base. The format of these files
|
|
is ######.yaml (where ###### is the launchpad bug number), the yaml should have
|
|
a ``query`` keyword which is the query text for elastic search.
|
|
|
|
Guidelines for good queries
|
|
|
|
- After a bug is resolved and has no more hits in elasticsearch, we
|
|
should flag it with a resolved_at keyword. This will let us keep
|
|
some memory of past bugs, and see if they come back.
|
|
- Queries should get as close as possible to fingerprinting the root cause
|
|
- Queries should not return any hits for successful jobs, this is a
|
|
sign the query isn't specific enough
|
|
|
|
In order to support rapidly added queries, it's considered socially
|
|
acceptable to +A changes that only add 1 new bug query, and to even
|
|
self approve those changes by core reviewers.
|
|
|
|
|
|
Adding Bug Signatures
|
|
---------------------
|
|
|
|
Most transient bugs seen in gate are not bugs in tempest associated
|
|
with a specific tempest test failure, but rather some sort of issue
|
|
further down the stack that can cause many tempest tests to fail.
|
|
|
|
#. Given a transient bug that is seen during the gate, go through the
|
|
logs (logs.openstack.org) and try to find a log that is associated
|
|
with the failure. The closer to the root cause the better.
|
|
#. Go to logstash.openstack.org and create an elastic search query to
|
|
find the log message from step 1. To see the possible fields to
|
|
search on click on an entry. Lucene query syntax is available at
|
|
http://lucene.apache.org/core/4_0_0/queryparser/org/apache/lucene/queryparser/classic/package-summary.html#package_description
|
|
|
|
Note that wildcard analysis is disabled by default in ElasticSearch so
|
|
while a query in logstash might work with wildcards, it will not work in
|
|
elastic-recheck. See the ElasticSearch documentation for more information
|
|
on wildcard analysis:
|
|
http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/query-dsl-query-string-query.html#_wildcards
|
|
|
|
#. Add a comment to the bug with the query you identified and a link to
|
|
the logstash url for that query search.
|
|
#. Add the query to ``elastic-recheck/queries/BUGNUMBER.yaml`` and push
|
|
the patch up for review.
|
|
https://git.openstack.org/cgit/openstack-infra/elastic-recheck/tree/queries
|
|
|
|
|
|
Future Work
|
|
------------
|
|
|
|
- Move config files into a separate directory
|
|
- Make unit tests robust
|
|
- Add debug mode flag
|
|
- Expand gating testing
|
|
- Cleanup and document code better
|
|
- Add ability to check if any resolved bugs return
|
|
- Move away from polling ElasticSearch to discover if its ready or not
|
|
- Add nightly job to propose a patch to remove bug queries that return
|
|
no hits -- Bug hasn't been seen in 2 weeks and must be closed
|