You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@metron.apache.org by "Nick Allen (JIRA)" <ji...@apache.org> on 2016/06/22 19:08:11 UTC

[jira] [Created] (METRON-250) Metron Dashboard Can Break Based on New Indices

Nick Allen created METRON-250:
---------------------------------

             Summary: Metron Dashboard Can Break Based on New Indices
                 Key: METRON-250
                 URL: https://issues.apache.org/jira/browse/METRON-250
             Project: Metron
          Issue Type: Bug
            Reporter: Nick Allen
            Assignee: Nick Allen


The Metron Dashboard is intended to display data only from the Snort, YAF, and Bro sensors.  The current implementation can be broken if a user adds an additional index that has some of the same fields as Snort, YAF, or Bro, but a different data type.

In this scenario, the Kibana dashboard will show the following error.

Error: [unsupported_operation_exception] custom format isn't supported




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)