You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@metron.apache.org by "Nick Allen (JIRA)" <ji...@apache.org> on 2017/05/02 13:11:04 UTC

[jira] [Commented] (METRON-508) Expand Elasticsearch templates to support the standard bro logs

    [ https://issues.apache.org/jira/browse/METRON-508?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15992857#comment-15992857 ] 

Nick Allen commented on METRON-508:
-----------------------------------

It might be good to break this guy up into multiple tasks.  One for each log type that you want to add.



> Expand Elasticsearch templates to support the standard bro logs
> ---------------------------------------------------------------
>
>                 Key: METRON-508
>                 URL: https://issues.apache.org/jira/browse/METRON-508
>             Project: Metron
>          Issue Type: Sub-task
>            Reporter: Jon Zeolla
>            Assignee: Jon Zeolla
>            Priority: Minor
>   Original Estimate: 2h
>  Remaining Estimate: 2h
>
> The current elasticsearch templates do not support any logs other than Conn, HTTP, and DNS.  We should provide additional templates so that an out-of-the-box bro install can send all of its logs into Metron and they will get probably indexed in elasticsearch.  



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)