[Bro] [bro] elasticsearch template

[Tim Desrochers]

Anyone using elasticsearch create a custom template for all bro logs and all fields.  I’m using dynamic templates right now and it works fine but I’d like to have a bit more control over things and I’d rather not reinvent the wheel if its been done before.

My google-fu has returned minimal results and none are for all possible bro logs with all possible fields



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160310/f1f988d9/attachment.html