You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@metron.apache.org by Farrukh Naveed Anjum <an...@gmail.com> on 2018/10/02 07:59:45 UTC
Upgrading to ElasticSearch 6 (GEOPoints)
Hi,
I am upgrading to Elasticsearch 5.6 with Kibana 5.6. Can you please guide
me how can I change its mapping to geo point (For BRO Template)
{
"geo_latitude": {
"match": "enrichments:geo:*:latitude",
"match_mapping_type": "*",
"mapping": {
"type": "float"
}
}
},
{
"geo_longitude": {
"match": "enrichments:geo:*:longitude",
"match_mapping_type": "*",
"mapping": {
"type": "float"
}
}
},
--
With Regards
Farrukh Naveed Anjum
Re: Upgrading to ElasticSearch 6 (GEOPoints)
Posted by Michael Miklavcic <mi...@gmail.com>.
It should be available via the load template option in Ambari.
e.g. http://node1:8080/#/main/services/METRON/summary -> Service Actions
-> Elasticsearch Template Install
Mind you, if you've modified the default templates then you'll probably
need to migrate them to the new ES model manually. We offer them ootb as a
convenience. I've included a number of references that should be helpful
below.
You can view the bro template that is now included with Metron here -
https://github.com/apache/metron/blob/master/metron-deployment/packaging/ambari/metron-mpack/src/main/resources/common-services/METRON/CURRENT/package/files/bro_index.template.
This should serve as a general guideline for the new template format
required by ES 5.6.2. Also see the following for more details on the ES
upgrade.
https://github.com/apache/metron/blob/master/Upgrading.md#041-to-042
https://github.com/apache/metron/tree/master/metron-platform/metron-elasticsearch#upgrading-to-562
Hope this helps!
Best,
Mike
On Tue, Oct 2, 2018 at 10:50 AM Farrukh Naveed Anjum <
anjum.farrukh@gmail.com> wrote:
> I am trying to plot it to Kibana 5.6 (Older Bro Template is using ES 2.4
> and Kibana 4.5).
>
> Can you help ? I am not sure geo_point exists in BRO Templeate do it ?
>
> On Tue, Oct 2, 2018 at 6:56 PM Michael Miklavcic <
> michael.miklavcic@gmail.com> wrote:
>
>> I'm not sure I completely follow. We also have a location point in the
>> template. Can you elaborate a bit more on what you're trying to accomplish?
>>
>> {
>> "geo_location_point": {
>> "match": "enrichments:geo:*:location_point",
>> "match_mapping_type": "*",
>> "mapping": {
>> "type": "geo_point"
>> }
>> }
>> },
>>
>>
>> On Tue, Oct 2, 2018 at 2:00 AM Farrukh Naveed Anjum <
>> anjum.farrukh@gmail.com> wrote:
>>
>>> Hi,
>>> I am upgrading to Elasticsearch 5.6 with Kibana 5.6. Can you please
>>> guide me how can I change its mapping to geo point (For BRO Template)
>>>
>>> {
>>> "geo_latitude": {
>>> "match": "enrichments:geo:*:latitude",
>>> "match_mapping_type": "*",
>>> "mapping": {
>>> "type": "float"
>>> }
>>> }
>>> },
>>> {
>>> "geo_longitude": {
>>> "match": "enrichments:geo:*:longitude",
>>> "match_mapping_type": "*",
>>> "mapping": {
>>> "type": "float"
>>> }
>>> }
>>> },
>>>
>>> --
>>> With Regards
>>> Farrukh Naveed Anjum
>>>
>>
>
> --
> With Regards
> Farrukh Naveed Anjum
>
Re: Upgrading to ElasticSearch 6 (GEOPoints)
Posted by Farrukh Naveed Anjum <an...@gmail.com>.
I am trying to plot it to Kibana 5.6 (Older Bro Template is using ES 2.4
and Kibana 4.5).
Can you help ? I am not sure geo_point exists in BRO Templeate do it ?
On Tue, Oct 2, 2018 at 6:56 PM Michael Miklavcic <
michael.miklavcic@gmail.com> wrote:
> I'm not sure I completely follow. We also have a location point in the
> template. Can you elaborate a bit more on what you're trying to accomplish?
>
> {
> "geo_location_point": {
> "match": "enrichments:geo:*:location_point",
> "match_mapping_type": "*",
> "mapping": {
> "type": "geo_point"
> }
> }
> },
>
>
> On Tue, Oct 2, 2018 at 2:00 AM Farrukh Naveed Anjum <
> anjum.farrukh@gmail.com> wrote:
>
>> Hi,
>> I am upgrading to Elasticsearch 5.6 with Kibana 5.6. Can you please guide
>> me how can I change its mapping to geo point (For BRO Template)
>>
>> {
>> "geo_latitude": {
>> "match": "enrichments:geo:*:latitude",
>> "match_mapping_type": "*",
>> "mapping": {
>> "type": "float"
>> }
>> }
>> },
>> {
>> "geo_longitude": {
>> "match": "enrichments:geo:*:longitude",
>> "match_mapping_type": "*",
>> "mapping": {
>> "type": "float"
>> }
>> }
>> },
>>
>> --
>> With Regards
>> Farrukh Naveed Anjum
>>
>
--
With Regards
Farrukh Naveed Anjum
Re: Upgrading to ElasticSearch 6 (GEOPoints)
Posted by Michael Miklavcic <mi...@gmail.com>.
I'm not sure I completely follow. We also have a location point in the
template. Can you elaborate a bit more on what you're trying to accomplish?
{
"geo_location_point": {
"match": "enrichments:geo:*:location_point",
"match_mapping_type": "*",
"mapping": {
"type": "geo_point"
}
}
},
On Tue, Oct 2, 2018 at 2:00 AM Farrukh Naveed Anjum <an...@gmail.com>
wrote:
> Hi,
> I am upgrading to Elasticsearch 5.6 with Kibana 5.6. Can you please guide
> me how can I change its mapping to geo point (For BRO Template)
>
> {
> "geo_latitude": {
> "match": "enrichments:geo:*:latitude",
> "match_mapping_type": "*",
> "mapping": {
> "type": "float"
> }
> }
> },
> {
> "geo_longitude": {
> "match": "enrichments:geo:*:longitude",
> "match_mapping_type": "*",
> "mapping": {
> "type": "float"
> }
> }
> },
>
> --
> With Regards
> Farrukh Naveed Anjum
>