maxtail output: empty...

[jimaek]

[root@xbmc ~]# ./maxtail --alias=dak --token=xxx--secret=xxx --format=nginx --interval=10
2014/07/02 02:58:05 empty ...
2014/07/02 02:58:15 empty ...
2014/07/02 02:58:25 empty ...

--verbose shows a bunch of data but nothing in normal mode

[jmervine]

"empty..." means no data is coming though on /v3/reporting/logs.json -- or more simply, the zone isn't getting any traffic. If you pass the "-q" flag, it will suppress that.

To verify, you can use maxcurl /v3/reporting/logs.json?start=<time-Nsec>&end=<time>, it should come back with no results as well.

[jimaek]

The zone is getting A LOT of traffic.
I forgot to mention the strange part. If Justin runs the exact same command(my keys) then it works for him. But not for me.

[jmervine]

Interesting, what OS? Mac?

[jimaek]

CentOS release 6.5 (Final) 2.6.32-431.17.1.el6.x86_64

[jmervine]

Interesting, okay. I was able to reproduce the issue on a CentOS box whose TZ is UTC. Am I right in guessing that you're box is UTC as well?

[jmervine]

So digging deeper, Max's Log endpoint uses GMT*, and therefore I'm going to update maxtail to do the same, but I no longer think TZ is the only issue. I think there's also an issue with with the API endpoint.

Note: Working updates on branch issues/2.

What I've tried:

1.) Started a looping curl to a file on my cdn, hitting http://cdn.mervine.net/bootstrap/master.css?<date stamp>.
2.) Checked http://cp.maxcdn.com and verified that the calls are showing there.
3.) Started maxtail -i 1, since updating the call to use UTC, I've getting occasional results (all misses).
4.) Used maxcurl to request a range of data (using UTC time) of current to 1 minute past; no records:

{
  "limit": 100,
  "next_page_key": null,
  "page": 1,
  "records": [],
  "request_time": 6
}

5.) Created a tailer in ruby (see: https://gist.github.com/jmervine/1a75c7b8b7b454f13c39) and got basically the same results -- little or no log message.

• The endpoint should use UTC over GMT; see http://www.timeanddate.com/time/aboututc.html, but for the purposes of this context, they're close enough.

[jimaek]

[root@xbmc xbmc]# date +%Z
EEST

[jmervine]

This has been somewhat resolved by #3, but will remain open while future work is done to get this work as intended.