[METRON-1226] Searching Can Errantly Query the Wrong Indices

• Type: Bug
• Status: Done
• Priority: Major
• Resolution: Done
• Affects Version/s: 0.4.1
• Fix Version/s: 0.4.2
• Assignee: Nick Allen
• Reporter: Nick Allen
• Created: 03/Oct/17 22:07
• Updated: 15/Dec/17 16:59
• Resolved: 15/Dec/17 16:59

Description

The ElasticsearchDAO can errantly query the wrong indices under certain conditions. This can occur when there are at least two different sensors that have been configured with a similar name prefix.

For example, if you have have configured both a "snort" and "snort_v2" sensor, the query generated by the ElasticsearchDAO will hit both of those indices, when in fact only one or the other is desired.

Issue Links

• links to: GitHub Pull Request #793