[METRON-902] ES improperly indexes Bro logs - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Bug
Status: Done
Priority: Major
Resolution: Done
Affects Version/s: None
Fix Version/s: 0.4.0
Labels:
None

Description

It appears that an old issue has been reintroduced into the ES template for indexing bro DNS logs. It is possible that other issues have been reintroduced as well, as I have not yet reviewed the template holistically.

Initial fix: https://github.com/apache/incubator-metron/blob/4bfb09c49fbc6204ce8b826887d99beff414f84a/metron-deployment/roles/metron_elasticsearch_templates/files/es_templates/bro_index.template#L165-L167
Reintroduction: https://github.com/apache/incubator-metron/blob/125dbef1e59ff808a62e4f5a7d265aafbcf6bf08/metron-deployment/packaging/ambari/metron-mpack/src/main/resources/common-services/METRON/0.2.0BETA/package/files/bro_index.template#L165-L167

Attachments

Issue Links

links to

GitHub Pull Request #555

Activity

People

Assignee:: Jon Zeolla

Reporter:: Jon Zeolla

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 28/Apr/17 15:23

Updated:: 27/Jun/17 00:08

Resolved:: 12/May/17 13:28