IJ36969: INCORRECT JSON FORMATTING FOR ESCAPE CHARACTERS IN WATCH FOLDER / FILE AUDIT LOGGING

APAR status

• Closed as program error.

Error description

• Certain characters such as newline (\n) or backslash (\),
  etc were not escaped correctly resulting in invalid JSON.
  JSON parsers are not be able to read the event correctly.
  

Local fix

• One could programmatically escape existing events to
  create valid JSON before the parser tries to ingest the event.
  

Problem summary

• Certain characters such as newline (\n) or backslash (\),
  etc were not escaped correctly resulting in invalid JSON.
  JSON parsers are not be able to read the event correctly.
  

Problem conclusion

• This problem is fixed in 5.0.5  PTF 12
  To see all Spectrum Scale APARs and
  their respective fix solutions refer to page
  https://public.dhe.ibm.com/storage/spectrumscale/spectrum_scale
  apars.html
  
  Benefits of the solution:
  JSON parsers can correctly parse the events
  from Watch Folder / File Audit Logging
  Work around:
  One could programmatically escape existing events to
  create valid JSON before the parser tries to ingest the event.
  Problem trigger:
  Filenames, acls, or xattrs with escape characters
  Symptom:  Unexpected Results/Behavior
  Platforms affected: ALL Linux OS environments
  Functional Area affected: File audit logging / Watch Folder
  Customer Impact: Suggested
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SPEC SCALE STD

• Fixed component ID

  5737F33AP

Applicable component levels