[Bro] ElasticSearch plugin
d7om.ph at hotmail.com
Mon Jun 13 09:15:36 PDT 2016
I never used it with Bro, However, I am really interested too.
Sent from my iPhone
> On Jun 13, 2016, at 8:47 AM, Seth Hall <seth at icir.org> wrote:
> Is there anyone here relying on the elasticsearch writer plugin in the bro-plugins repository? It doesn't appear to work with current versions of elasticsearch anymore and it has always had trouble at sites with high rates of logging.
> If we don't get much of a response on this we will be deprecating and/or removing the elasticsearch writer. There should be more reliable mechanisms available soon anyway by either writing to a Kafka server and then forwarding to ElasticSearch or writing files as JSON and the forwarding to ElasticSearch.
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> Bro mailing list
> bro at bro-ids.org
More information about the Bro