Skip to content

NGSIEM stop_search giving 'No content was received for this request.' #1398

@jsdjjsd

Description

@jsdjjsd

Describe the bug
If I use NGSIEM to start a query search and make a note of the ID, and then run stop_search with that same ID I get "No content was received for this request".

And by the way, I checked that the query had not finished, done was still False.

To Reproduce
response = falcon.start_search(repository="search-all", is_live=False, start="7d", query_string="#event_simpleName=*")
search_id = response.get('resources').get('id')
falcon.stop_search(repository='search-all', search_id=search_id)

{'status_code': 200, 'headers': {}, 'body': {'errors': [{'message': 'No content was received for this request.'}], 'resources': []}}

Expected behavior
That the search query be cancelled in LogScale.

Environment (please complete the following information):

  • OS: Ubuntu 22.04
  • Python: 3.9.25
  • FalconPy: 1.5.3

PS. The FalconPy documentation for stop_search says 'id' as field, where it's asking for 'search_id'.

Metadata

Metadata

Assignees

Labels

bug 🐛Something isn't workinginvestigatingThis issue is being investigatedngsiemNGSIEM issues and questions

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions