You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@metron.apache.org by "Nick Allen (JIRA)" <ji...@apache.org> on 2016/06/22 19:09:08 UTC

[jira] [Created] (METRON-252) Metron Dashboard Can Be Broken By Adding Index

Nick Allen created METRON-252:
---------------------------------

             Summary: Metron Dashboard Can Be Broken By Adding Index
                 Key: METRON-252
                 URL: https://issues.apache.org/jira/browse/METRON-252
             Project: Metron
          Issue Type: Bug
            Reporter: Nick Allen
            Assignee: Nick Allen


The Metron Dashboard is intended to display data only from the Snort, YAF, and Bro sensors.  The current implementation can be broken if a user adds an additional index that has some of the same fields as Snort, YAF, or Bro, but a different data type.  In this scenario, the Kibana dashboard will show the following error.

Error: [unsupported_operation_exception] custom format isn't supported




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)