psort-studentpc1-services end-to-end test failing with QueueFull

[joachimmetz]

a previous instance of this issue #3001

2020-06-28 00:54:56,187 [INFO] (MainProcess) PID:4328 <data_location> Determined data location: /tmp/workspace/psort-linux-services/data
Traceback (most recent call last):
  File "./tools/psort.py", line 99, in <module>
    if not Main():
  File "./tools/psort.py", line 76, in Main
    tool.ProcessStorage()
  File "/tmp/workspace/psort-linux-services/plaso/cli/psort_tool.py", line 556, in ProcessStorage
    worker_memory_limit=self._worker_memory_limit)
  File "/tmp/workspace/psort-linux-services/plaso/multi_processing/psort.py", line 947, in AnalyzeEvents
    storage_writer, analysis_plugins, event_filter=event_filter)
  File "/tmp/workspace/psort-linux-services/plaso/multi_processing/psort.py", line 308, in _AnalyzeEvents
    event_queue.PushItem((event, event_data, event_data_stream))
  File "/tmp/workspace/psort-linux-services/plaso/engine/zeromq_queue.py", line 457, in PushItem
    raise errors.QueueFull
plaso.lib.errors.QueueFull

• fix issue Changes to fix Windows services analysis plugin #3145 #3146
• add end-to-end test that can be run on CI Added extract and analyze end-to-end test #3148
  • reduce analysis module (worker process) time out, default is 15 mins

[joachimmetz]

Traceback (most recent call last):
  File "plaso/multi_processing/analysis_process.py", line 246, in _ProcessEvent
    self._analysis_plugin.ExamineEvent(
  File "plaso/analysis/windows_services.py", line 281, in ExamineEvent
    service = WindowsService.FromEventData(event_data, event_data_stream)
  File "plaso/analysis/windows_services.py", line 137, in FromEventData
    event_data.start_type, event_data.object_name, source,
AttributeError: 'EventData' object has no attribute 'object_name'

Traceback (most recent call last):
  File "plaso/multi_processing/analysis_process.py", line 246, in _ProcessEvent
    self._analysis_plugin.ExamineEvent(
  File "plaso/analysis/windows_services.py", line 281, in ExamineEvent
    service = WindowsService.FromEventData(event_data, event_data_stream)
  File "plaso/analysis/windows_services.py", line 138, in FromEventData
    service_dll=event_data.service_dll)
AttributeError: 'EventData' object has no attribute 'service_dll'