[Bro] NSQ plugin getting deprecated in 2.5
Azoff, Justin S
jazoff at illinois.edu
Mon Sep 19 09:15:40 PDT 2016
> On Sep 19, 2016, at 11:59 AM, Vlad Grigorescu <vladg at illinois.edu> wrote:
>
> Generalizing it might be a bit tricky. For example, ElasticSearch needs
> to post to http://1.2.3.4:9000/$log_name, while NSQ needs to add a
> line containing the log_name before each log line.
That wasn't really NSQ that required that, it was whatever was pulling the records out of NSQ and pushing them into ES that wanted that.
I think the new logging ext stuff that was added for kafka would make that extra record redundant now.
--
- Justin Azoff
More information about the Bro
mailing list