[Bro] ElasticSearch plugin

ِABDUL ALEANAZI d7om.ph at hotmail.com
Mon Jun 13 09:15:36 PDT 2016

I never used it with Bro, However, I am really interested too.

Sent from my iPhone

> On Jun 13, 2016, at 8:47 AM, Seth Hall <seth at icir.org> wrote:
> Is there anyone here relying on the elasticsearch writer plugin in the bro-plugins repository?  It doesn't appear to work with current versions of elasticsearch anymore and it has always had trouble at sites with high rates of logging.
> If we don't get much of a response on this we will be deprecating and/or removing the elasticsearch writer.  There should be more reliable mechanisms available soon anyway by either writing to a Kafka server and then forwarding to ElasticSearch or writing files as JSON and the forwarding to ElasticSearch.
> Thanks,
>  .Seth
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro.org/
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro

More information about the Bro mailing list