You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@metron.apache.org by "David M. Lyle (JIRA)" <ji...@apache.org> on 2016/06/06 23:10:20 UTC

[jira] [Created] (METRON-212) Allow additional Elasticsearch templates to be loaded to the index

David M. Lyle created METRON-212:
------------------------------------

             Summary: Allow additional Elasticsearch templates to be loaded to the index
                 Key: METRON-212
                 URL: https://issues.apache.org/jira/browse/METRON-212
             Project: Metron
          Issue Type: Task
            Reporter: David M. Lyle
            Assignee: David M. Lyle


Currently, deployment will only set up templates for Bro, Yaf, and Snort. 

Do the following: 
1) Relocate the template creation to the metron_streaming role to enable re-running as new topologies are deployed.
2) Glob any *.template files in metron_streaming/files/es_templates and send them to the Elasticsearch index as a PUT _template/basename (i.e. foo.template would be added as PUT _template/foo)

Is there any value to adding a configurable directory location to add additional templates? Could do as part of this effort, but I don't know if there is any need.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)