Add e-r query for bug/1646779

Add an E-R query for bug/1646779. The error message in n-cpu is about
libvirt not reachable, but the cause of that is that libvirt is killed
by the kernel because of either a general protection or a stack segment
trap. Both cases happen close to a virtlogd error message:

"End of file while reading data: Input/output error"

However the frequency of that is 3/4 times more than that of the result
of this query, which suggests that that error message is not always
related to libvirt getting killed, even if the other way around seems
to be the case.

Change-Id: I94a96469c21805b266beeee8c4863001886ab549
Related-Bug: #1646779
This commit is contained in:
Andrea Frittoli 2016-12-02 18:18:10 +00:00
parent ec0b1986f4
commit 51cc3d9bf4
1 changed files with 6 additions and 0 deletions

6
queries/1646779.yaml Normal file
View File

@ -0,0 +1,6 @@
query: >-
(message:"trap stack segment ip" OR
message:"general protection ip") AND
message:"traps: libvirtd[" AND
message:"error:0 in libc-2.23.so" AND
tags: "syslog"