[
https://issues.apache.org/jira/browse/METRON-508?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16069176#comment-16069176
]
ASF GitHub Bot commented on METRON-508:
---------------------------------------
Github user JonZeolla commented on the issue:
https://github.com/apache/metron/pull/586
Out of sheer frustration I merged in #624 in its current state and got
Travis to pass on the first try after a dozen failures. Great work @justinleet
@cestella and others. Obviously now this has a dependency of METRON-1004 so
I've edited the title of this to include "[DO NOT MERGE UNTIL METRON-1004]".
Still looking for a review - looking back I should have squash merged, but due
to the simplicity of the changes in this PR, it's probably not worth going back
and fixing it.
> Expand Elasticsearch templates to support the standard bro logs
> ---------------------------------------------------------------
>
> Key: METRON-508
> URL: https://issues.apache.org/jira/browse/METRON-508
> Project: Metron
> Issue Type: Sub-task
> Reporter: Jon Zeolla
> Assignee: Jon Zeolla
> Priority: Minor
> Original Estimate: 2h
> Remaining Estimate: 2h
>
> The current elasticsearch templates do not support any logs other than Conn,
> HTTP, and DNS. We should provide additional templates so that an
> out-of-the-box bro install can send all of its logs into Metron and they will
> get probably indexed in elasticsearch.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
