On Wed, 2014-07-02 at 20:53 -0400, Bamm Visscher wrote:
Did this cause your DB to fail again? Restarting BY should fix it.


On Wed, Jul 2, 2014 at 8:16 PM, James Lay <jlay@slave-tothe-box.net> wrote:
On Wed, 2014-07-02 at 12:47 -0400, Bamm Visscher wrote:
Hi James,

This does look like there is a TZ issue at play. I'll dig deeper when I get a chance this evening. One way to get back up would be to temporarily disable the autocat rule that is triggering the update.


And again...moments ago:

Jul  2 18:01:59 x.x.x.x barnyard2[15859]: FATAL ERROR: sguil: Expected Confirm 904 and got: Failed to insert 904: mysqlexec/db server: Duplicate entry 4-904 for key PRIMARY#012.  I'm officially at a loss at one to do now besides roll back to 0.8.0.


Negative....sguild will no longer start....exact same thing as earlier...around the same time as well:

[19:20:47 @ids:~$] mysqlexec/db server: Table 'sguildb.event_External_20140703' doesn't exist
    while executing
"mysqlexec $MAIN_DB_SOCKETID $updateString"
    (procedure "UpdateDBStatus" line 11)
    invoked from within
"UpdateDBStatus [lindex $data 3] [lindex $data 4] [lindex $data 5] [lindex $data 6] [GetCurrentTimeStamp] $AUTOID $acCat($rid)"
    (procedure "AutoCat" line 43)
    invoked from within
"AutoCat $row"
    ("foreach" body line 6)
    invoked from within
"foreach row [mysqlsel $MAIN_DB_SOCKETID $tmpQry -list] {
        InfoMessage "Archived Alert: $row"
        set LAST_EVENT_ID([lindex $row 3]) "[li..."
    invoked from within
"if { $mergeTableListArray(event) != "" } {

    # Get the archived alerts
    LogMessage "Querying DB for archived events..."
    set MAJOR_MYSQL_VERS..."
    (file "/opt/bin/sguil/sguild" line 734)