bug(sync): armis integration sweep results query failing #337

New issue

Closed

opened 2026-03-28 04:23:35 +00:00 by mfreeman451 · 1 comment

mfreeman451 commented

2026-03-28 04:23:35 +00:00

Owner

Imported from GitHub.

Original GitHub issue: #930
Original author: @mfreeman451
Original URL: https://github.com/carverauto/serviceradar/issues/930
Original created: 2025-06-16T18:33:08Z

2025/06/16 13:25:35 Fetched 3 devices for 'all_devices', total so far: 3
2025/06/16 13:25:35 Fetched total of 3 devices from Armis

2025/06/16 13:25:36 gRPC call: /proto.KVService/Put attempt: 1 target: 10.XXX.XX.224:50057 duration: 6.289292ms error: <nil>
2025/06/16 13:25:36 Wrote sweep config to agents/10.XXX.XX.224/checkers/sweep/sweep.json
2025/06/16 13:25:36 Armis updater and querier are configured, proceeding with sweep result correlation.
2025/06/16 13:25:36 Executing SRQL query for today's sweep results: show sweep_results where date(timestamp) = TODAY and discovery_source = "sweep"
2025/06/16 13:25:36 Executing SRQL query: show sweep_results where date(timestamp) = TODAY and discovery_source = "sweep"
2025/06/16 13:25:36 Request body: {"query":"show sweep_results where date(timestamp) = TODAY and discovery_source = \"sweep\"","limit":1000}
2025/06/16 13:25:36 Executing SRQL query: show sweep_results where date(timestamp) = TODAY and discovery_source = "sweep"
2025/06/16 13:25:36 Request body: {"query":"show sweep_results where date(timestamp) = TODAY and discovery_source = \"sweep\"","limit":1000,"cursor":"foobar"}
2025/06/16 13:25:36 Failed to get sweep results, skipping update: failed to execute query: API returned status 500: {"message":"failed to execute query: query error: failed to execute query: code: 62, message: Syntax error: failed at position 103 ('_tp_time'): _tp_time \u003c '2025-06-16T18:25:20Z' OR ip != '192.XXX.XXX.158' ORDER BY _tp_time DESC LIMIT 1000. Expected one of: NOT, BETWEEN, IS, AS, PARTITION BY, SHUFFLE BY, GROUP BY, WITH, HAVING, WINDOW, ORDER BY, LIMIT, EMIT, SETTINGS, UNION, FORMAT, end of query","status":500}
2025/06/16 13:25:36 gRPC call: /proto.KVService/Put attempt: 1 target: 10.XXX.XX.224:50057 duration: 820.217µs error: <nil>
2025/06/16 13:25:36 gRPC call: /proto.KVService/Put attempt: 1 target: 10.XXX.XX.224:50057 duration: 519.352µs error: <nil>
2025/06/16 13:25:36 gRPC call: /proto.KVService/Put attempt: 1 target: 10.XXX.XX.224:50057 duration: 410.065µs error: <nil>```

Imported from GitHub. Original GitHub issue: #930 Original author: @mfreeman451 Original URL: https://github.com/carverauto/serviceradar/issues/930 Original created: 2025-06-16T18:33:08Z --- 2025/06/16 13:25:35 Fetched 3 devices for 'all_devices', total so far: 3 2025/06/16 13:25:35 Fetched total of 3 devices from Armis ```2025/06/16 13:25:35 Sweep config to be written: &{Networks:[10.XXX.XXX.227/32 192.XXX.XXX.158/32 10.XXX.XXX.216/32] Ports:[22 80 443 3389 445 5985 5986 8080] SweepModes:[icmp tcp] Interval:10m Concurrency:100 Timeout:15s IcmpCount:1 HighPerfIcmp:true IcmpRateLimit:5000} 2025/06/16 13:25:36 gRPC call: /proto.KVService/Put attempt: 1 target: 10.XXX.XX.224:50057 duration: 6.289292ms error: <nil> 2025/06/16 13:25:36 Wrote sweep config to agents/10.XXX.XX.224/checkers/sweep/sweep.json 2025/06/16 13:25:36 Armis updater and querier are configured, proceeding with sweep result correlation. 2025/06/16 13:25:36 Executing SRQL query for today's sweep results: show sweep_results where date(timestamp) = TODAY and discovery_source = "sweep" 2025/06/16 13:25:36 Executing SRQL query: show sweep_results where date(timestamp) = TODAY and discovery_source = "sweep" 2025/06/16 13:25:36 Request body: {"query":"show sweep_results where date(timestamp) = TODAY and discovery_source = \"sweep\"","limit":1000} 2025/06/16 13:25:36 Executing SRQL query: show sweep_results where date(timestamp) = TODAY and discovery_source = "sweep" 2025/06/16 13:25:36 Request body: {"query":"show sweep_results where date(timestamp) = TODAY and discovery_source = \"sweep\"","limit":1000,"cursor":"foobar"} 2025/06/16 13:25:36 Failed to get sweep results, skipping update: failed to execute query: API returned status 500: {"message":"failed to execute query: query error: failed to execute query: code: 62, message: Syntax error: failed at position 103 ('_tp_time'): _tp_time \u003c '2025-06-16T18:25:20Z' OR ip != '192.XXX.XXX.158' ORDER BY _tp_time DESC LIMIT 1000. Expected one of: NOT, BETWEEN, IS, AS, PARTITION BY, SHUFFLE BY, GROUP BY, WITH, HAVING, WINDOW, ORDER BY, LIMIT, EMIT, SETTINGS, UNION, FORMAT, end of query","status":500} 2025/06/16 13:25:36 gRPC call: /proto.KVService/Put attempt: 1 target: 10.XXX.XX.224:50057 duration: 820.217µs error: <nil> 2025/06/16 13:25:36 gRPC call: /proto.KVService/Put attempt: 1 target: 10.XXX.XX.224:50057 duration: 519.352µs error: <nil> 2025/06/16 13:25:36 gRPC call: /proto.KVService/Put attempt: 1 target: 10.XXX.XX.224:50057 duration: 410.065µs error: <nil>```

mfreeman451 commented

2026-03-28 04:23:36 +00:00

Author

Owner

Imported GitHub comment.

Original author: @mfreeman451
Original URL: https://github.com/carverauto/serviceradar/issues/930#issuecomment-2978595838
Original created: 2025-06-17T00:59:09Z

fixed, closing

Imported GitHub comment. Original author: @mfreeman451 Original URL: https://github.com/carverauto/serviceradar/issues/930#issuecomment-2978595838 Original created: 2025-06-17T00:59:09Z --- fixed, closing