debricked/dmarc-visualizer

Grafana only shows new reports downloaded from email inbox, while old reports are still stored in aggregate.csv

Closed this issue · 1 comments

So i have been using this for a while, through all of the fixes and updates.

My method of usage, is to spin up the docker stack, allow it to update from my DMARC email inbox, and then i can take a look to see if there are any issues, then i shut it all down.

It may stay down for a month or so, then i spin it back up to check on things.

Im realizing that when i spin up the docker stack, it only updates the NEW reports found in my email inbox.

The Aggragate.CSV file in the output folder is being updated, and contains all emails from back to 2020, but theyre not displayed in Grafana. Ive double checked and have grafana set to show data from last 5 years.

When parsedmarc grabs reports from the email inbox, it processes it, and i assume saves it in the aggregate CSV and JSON files.

Are those files read by elasticsearch or Grafana? Or will it need to read the reports from the email, and once its shut down, it loses it from current inventory?

Solved, Somehow i removed the volume mapped to the elasticsearch container while updating the dockerfiles.

Remapping the volume fixed the issue.