rasqlinsert -s -record doesn't seem to work

Carter Bullard carter at qosient.com
Tue Oct 16 21:13:25 EDT 2012


Hey Paul,
Hmmm, what is the RA_FIELD_SPECIFIER set to in your rasqlinsert.conf?

If you've run rasqlinsert() a bunch of times, with different fields defined, 
you may need to drop your table so that rasqlinsert() will generate the correct
schema, once you get your fields the way you want them.

Carter

On Oct 16, 2012, at 2:55 PM, Paul Schmehl <pschmehl_lists at tx.rr.com> wrote:

> I'm using this commandline:
> 
> # rasqlinsert -Z b -F rasqlinsert.conf -s -record -r /path/to/argus/files/2012-10-15/argus.log.2012-10-15.16\:00\:00.bz2 -w mysql://user:pass@buttercup4.utdallas.edu/databasename/tablename
> 
> But I'm getting these on the console when I run it:
> 
> rasqlinsert[3137]: 2012-10-16 18:51:51 mysql_real_query error Unknown column 'record' in 'field list'
> 
> If I add a column named record, these errors go away, but I have the blobs in the db.  I don't want the blobs.
> 
> How do I get rid of them?
> 
> -- 
> Paul Schmehl, Senior Infosec Analyst
> As if it wasn't already obvious, my opinions
> are my own and not those of my employer.
> *******************************************
> "It is as useless to argue with those who have
> renounced the use of reason as to administer
> medication to the dead." Thomas Jefferson
> "There are some ideas so wrong that only a very
> intelligent person could believe in them." George Orwell
> 
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2589 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20121016/1386137e/attachment.bin>


More information about the argus mailing list