# Failed to compile node 'crowdsecurity/syslog-logs'

**URL:** <https://discourse.crowdsec.net/t/failed-to-compile-node-crowdsecurity-syslog-logs/276>\
**Category:** Uncategorized\
**Created:** [September 16, 2021, 1:58pm UTC](https://discourse.crowdsec.net/t/failed-to-compile-node-crowdsecurity-syslog-logs/276 "2021-09-16T13:58:50Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![teol](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/teol/32/88_2.png) [@teol](https://discourse.crowdsec.net/u/teol)\
**Post date:** [September 16, 2021, 1:58pm UTC](https://discourse.crowdsec.net/t/failed-to-compile-node-crowdsecurity-syslog-logs/276/1 "2021-09-16T13:58:50Z")

</div>

Hi,

I just updated my crowdsec hub and its collections and I’m now facing a fatal error that prevents me from starting Crowdsec again:

> time=“16-09-2021 15:51:26” level=info msg=“Crowdsec v1.0.0-674630f7b189b1c3f0c6c9a5ac76addb9e810051”
> 
> time=“16-09-2021 15:51:26” level=info msg=“Loading prometheus collectors”
> 
> time=“16-09-2021 15:51:26” level=info msg=“Loading CAPI pusher”
> 
> time=“16-09-2021 15:51:26” level=info msg=“Loading grok library /etc/crowdsec//patterns/”
> 
> time=“16-09-2021 15:51:27” level=info msg=“Loading enrich plugins”
> 
> time=“16-09-2021 15:51:27” level=info msg=“Loading parsers 11 stages”
> 
> time=“16-09-2021 15:51:27” level=error msg=“Statics Compilation failed type types.Line has no field Module (1:10)\n | evt.Line.Module\n | …^.” id=fragrant-bush name=crowdsecurity/syslog-logs stage=s00-raw
> 
> time=“16-09-2021 15:51:27” level=fatal msg=“crowdsec init: Failed to load parsers: failed to load parser config : failed to compile node ‘crowdsecurity/syslog-logs’ in ‘/etc/crowdsec/parsers/s00-raw/syslog-logs.yaml’ : type types.Line has no field Module (1:10)\n | evt.Line.Module\n | …^”

Do you know how can I solve this?

Thank you

---

<div class="post-metadata">

**Author:** ![alteredCoder](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/alteredcoder/32/44_2.png) [@alteredCoder](https://discourse.crowdsec.net/u/alteredCoder)\
**Post date:** [September 17, 2021, 8:01am UTC](https://discourse.crowdsec.net/t/failed-to-compile-node-crowdsecurity-syslog-logs/276/2 "2021-09-17T08:01:43Z")

</div>

Hello @teol ,

How did you update your crowdsec hub ? Did you specify a branch ?  
Else, did you set a branch directly in your config.yaml ?

---

<div class="post-metadata">

**Author:** ![teol](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/teol/32/88_2.png) [@teol](https://discourse.crowdsec.net/u/teol)\
**Post date:** [September 17, 2021, 8:25am UTC](https://discourse.crowdsec.net/t/failed-to-compile-node-crowdsecurity-syslog-logs/276/3 "2021-09-17T08:25:51Z")

</div>

Hi 🙂

I did a `cscli hub update` and then upgraded each collections shown as outdated with like `cscli collections upgrade crowdsecurity/linux`

I didn’t put anything in the config.yaml

---

<div class="post-metadata">

**Author:** ![alteredCoder](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/alteredcoder/32/44_2.png) [@alteredCoder](https://discourse.crowdsec.net/u/alteredCoder)\
**Post date:** [September 17, 2021, 8:28am UTC](https://discourse.crowdsec.net/t/failed-to-compile-node-crowdsecurity-syslog-logs/276/4 "2021-09-17T08:28:33Z")

</div>

Can you paste the output of `sudo cscli hub update --debug` please?

---

<div class="post-metadata">

**Author:** ![teol](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/teol/32/88_2.png) [@teol](https://discourse.crowdsec.net/u/teol)\
**Post date:** [September 17, 2021, 8:29am UTC](https://discourse.crowdsec.net/t/failed-to-compile-node-crowdsecurity-syslog-logs/276/5 "2021-09-17T08:29:35Z")

</div>

```auto
# cscli hub update --debug
DEBU[0000] Using /etc/crowdsec/config.yaml as configuration file 
DEBU[0000] fetching index from branch master (https://raw.githubusercontent.com/crowdsecurity/hub/master/.index.json) 
INFO[0000] Wrote new 134801 bytes index to /etc/crowdsec/hub/.index.json 
DEBU[0000] 4 item types in hub index                    
DEBU[0000] scanning /etc/crowdsec                       
DEBU[0000] scanning /etc/crowdsec/hub

```

---

<div class="post-metadata">

**Author:** ![alteredCoder](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/alteredcoder/32/44_2.png) [@alteredCoder](https://discourse.crowdsec.net/u/alteredCoder)\
**Post date:** [September 17, 2021, 8:34am UTC](https://discourse.crowdsec.net/t/failed-to-compile-node-crowdsecurity-syslog-logs/276/6 "2021-09-17T08:34:56Z")

</div>

The problem here is that your cscli is targeting the `master` branch while you are not on the latest version of crowdsec 😕 .

There is two ways of fixing this:

- Update crowdsec to the latest version so you will target the master branch of the hub without bug
- Update your /etc/crowdsec/config.yaml, in the `cscli` section you can add a `hub_branch` to specify the v1.0.0 :

```auto
cscli:
  output: human
  hub_branch: "v1.0.0"

```

---

<div class="post-metadata">

**Author:** ![teol](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/teol/32/88_2.png) [@teol](https://discourse.crowdsec.net/u/teol)\
**Post date:** [September 17, 2021, 8:39am UTC](https://discourse.crowdsec.net/t/failed-to-compile-node-crowdsecurity-syslog-logs/276/7 "2021-09-17T08:39:00Z")

</div>

Ok I see, thanks.

I installed crowdsec back when there was only the wizard.sh.

How should I update it to the last version?  
Maybe it’s time for me to start using the deb version in your repo?

---

<div class="post-metadata">

**Author:** ![alteredCoder](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/alteredcoder/32/44_2.png) [@alteredCoder](https://discourse.crowdsec.net/u/alteredCoder)\
**Post date:** [September 17, 2021, 9:01am UTC](https://discourse.crowdsec.net/t/failed-to-compile-node-crowdsecurity-syslog-logs/276/8 "2021-09-17T09:01:07Z")

</div>

Yes it might be the time 🙂

There is again two ways to do this:

- The easy way (if you don’t need to backup anything): you run the `./wizard.sh --uninstall` and then install crowdsec from our repositories (cf. [Install CrowdSec | CrowdSec](https://docs.crowdsec.net/docs/v1.1/getting_started/install_crowdsec))
- The hard way (we didn’t test it): You run `cscli config backup <backup_folder>` to backup your existing configuration. Then you uninstall your running crowdsec with `./wizard.sh --uninstall` , install the new one from our repositories ([Install CrowdSec | CrowdSec](https://docs.crowdsec.net/docs/v1.1/getting_started/install_crowdsec)) and then you can run `cscli config restore <backup_folder>` . Some things might not work, (especially from the config.yaml file), but let us know how it goes 🙂