[METRON-543] Provide a more comprehensive elasticsearch solution

• Type: Improvement
• Status: To Do
• Priority: Minor
• Resolution: Unresolved
• Assignee: Unassigned
• Reporter: Jon Zeolla
• Created: 03/Nov/16 16:52
• Updated: 03/Nov/16 16:52

Description

I consider the current elasticsearch system, as provisioned via Metron, minimally viable and lacking some widely-accepted updates which can be broadly applied to the Metron use case. This issue is to track completion of those tasks.

Sub-Tasks

• Allow configuration of multiple Elasticsearch instances per server: To Do
• Add performance tuning settings to Elasticsearch: To Do
• Expand Elasticsearch templates to support the standard bro logs: Done