crowdsecurity/crowdsec · error

missing stream or group name

Error message

missing stream or group name

What it means

Post-parse validation in ConfigureByDSN: after processing all DSN parameters, StreamName is nil or GroupName is empty. This fires when the DSN's path portion (group:stream) was malformed — the earlier frags check should have caught a missing colon, so reaching this guard usually means the config was left unset by an abnormal DSN shape.

Source

Thrown at pkg/acquisition/modules/cloudwatch/config.go:291

			start := time.Now().UTC().Add(-duration)
			s.Config.StartTime = &start
			end := time.Now().UTC()
			s.Config.EndTime = &end
		default:
			return fmt.Errorf("unexpected argument %s", k)
		}
	}

	s.logger.Tracef("host=%s", s.Config.GroupName)
	s.logger.Tracef("stream=%s", *s.Config.StreamName)
	s.Config.GetLogEventsPagesLimit = &def_GetLogEventsPagesLimit

	if err := s.newClient(ctx); err != nil {
		return err
	}

	if s.Config.StreamName == nil || s.Config.GroupName == "" {
		return errors.New("missing stream or group name")
	}

	if s.Config.StartTime == nil || s.Config.EndTime == nil {
		return errors.New("start_date and end_date or backlog are mandatory in one-shot mode")
	}

	s.Config.Mode = configuration.CAT_MODE
	s.streamIndexes = make(map[string]string)
	s.t = &tomb.Tomb{}

	return nil
}

View on GitHub (pinned to 909b515798)

Solutions

1. Use the full DSN form: cloudwatch:///my/group/name:stream/name — group and stream separated by a colon
2. Ensure the stream name after the colon is not empty
3. For YAML config, set both group_name and stream_name

When it happens

Trigger: Thrown at pkg/acquisition/modules/cloudwatch/config.go:291 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of crowdsecurity/crowdsec@909b515798 (2026-09-06). Data as JSON: /api/errors/4fb03857c3374a0b. Report an issue: GitHub.