[Bro] ElasticSearch plugin

ِABDUL ALEANAZI d7om.ph at hotmail.com
Mon Jun 13 09:15:36 PDT 2016


I never used it with Bro, However, I am really interested too.


Sent from my iPhone

> On Jun 13, 2016, at 8:47 AM, Seth Hall <seth at icir.org> wrote:
> 
> Is there anyone here relying on the elasticsearch writer plugin in the bro-plugins repository?  It doesn't appear to work with current versions of elasticsearch anymore and it has always had trouble at sites with high rates of logging.
> 
> If we don't get much of a response on this we will be deprecating and/or removing the elasticsearch writer.  There should be more reliable mechanisms available soon anyway by either writing to a Kafka server and then forwarding to ElasticSearch or writing files as JSON and the forwarding to ElasticSearch.
> 
> Thanks,
>  .Seth
> 
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro.org/
> 
> 
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro



More information about the Bro mailing list