Skip to main content

Event Management Troubleshooting

Common issues and solutions for event management.

Common Issues​

Events Not Appearing​

Symptoms

  • Events sent but not visible
  • Missing events in dashboard
  • Delayed event processing

Solutions

  1. Check API authentication
  2. Verify event format
  3. Review rate limits
  4. Check queue status
  5. Examine error logs

Event Correlation Issues​

Symptoms

  • Events not correlating
  • Incorrect grouping
  • Missing relationships

Solutions

  1. Verify correlation rules
  2. Check time windows
  3. Review CI relationships
  4. Update correlation criteria

Performance Issues​

Symptoms

  • Slow event processing
  • Queue backlogs
  • High latency

Solutions

  1. Scale processing workers
  2. Optimize correlation rules
  3. Archive old events
  4. Review database indexes

Debugging Steps​

1. Check Event Flow​

# Check incoming events
GET /api/events/stats

# View processing queue
GET /admin/queues

# Check error logs
tail -f backend/logs/error.log

2. Verify Configuration​

  • Event sources configured correctly
  • Webhooks accessible
  • Credentials valid
  • Network connectivity

3. Test Event Ingestion​

# Test single event
POST /api/events/ingest
{
  "source": "test",
  "message": "Test event"
}

Log Analysis​

Key Log Files​

  • backend/logs/events.log - Event processing
  • backend/logs/error.log - Errors
  • backend/logs/combined.log - All activity

Log Patterns​

  • Look for authentication failures
  • Check for format errors
  • Monitor processing times
  • Track correlation matches

Getting Help​

  1. Check documentation
  2. Review error messages
  3. Enable debug logging
  4. Contact support team