From f3aab18873044d5576d2539e750fb17a03a85b0b Mon Sep 17 00:00:00 2001 From: Lucas Manuel Rodriguez Date: Fri, 22 Dec 2023 14:44:36 -0300 Subject: [PATCH] Change noisy `directIngestWindowsUpdateHistory` log from `warn` to `debug` (#15772) #14939 - [X] Manual QA for all new/changed functionality. --- server/service/osquery_utils/queries.go | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/server/service/osquery_utils/queries.go b/server/service/osquery_utils/queries.go index 97b2e10065..06b245e387 100644 --- a/server/service/osquery_utils/queries.go +++ b/server/service/osquery_utils/queries.go @@ -1122,7 +1122,9 @@ func directIngestWindowsUpdateHistory( for _, row := range rows { u, err := fleet.NewWindowsUpdate(row["title"], row["date"]) if err != nil { - level.Warn(logger).Log("op", "directIngestWindowsUpdateHistory", "skipped", err) + // If the update failed to parse then we log a debug error and ignore it. + // E.g. we've seen KB updates with titles like "Logitech - Image - 1.4.40.0". + level.Debug(logger).Log("op", "directIngestWindowsUpdateHistory", "skipped", err) continue }