search

iserko / logstash-input-cloudflare

Logstash Input Plugin for Cloudflare logs
Other
14 stars 12 forks source link

Support new /received endpoint #12

Open iserko opened 6 years ago

iserko commented 6 years ago

Following https://support.cloudflare.com/hc/en-us/articles/115003165991-Enterprise-Log-Share-ELS-Migrating-to-New-Endpoint the code needs to be updated to support the new endpoint as the old one will be shut down mid March

br-zezowski commented 6 years ago

That's why the code isn't working now?

iserko commented 6 years ago

@br-zezowski not as far as I know ... it works just fine for us using the old endpoint (on version 2.2.4 of Logstash)

br-zezowski commented 6 years ago

Iserko, what would be that auth_key? Is it my API key? I'm a Enterprise user of Cloudflare. Another question: does this work with Logstash/Kibana/Elasticsearch in their 6.1.1 version? Thanks

iserko commented 6 years ago

@br-zezowski None of this is related to the issue I opened here.

But: auth_key is the API key (see https://support.cloudflare.com/hc/en-us/articles/216672448-Enterprise-Log-Share-REST-API)

I believe as of right now this version of the plugin does not work with version 6.x. That issue was recorded in #9 is for

alpuriku commented 6 years ago

@iserko In the new schema, "Timestamp" does not exist anymore. I am wondering what field I should use to identify the start time and end time now.

iserko commented 6 years ago

@alpuriku looking at https://support.cloudflare.com/hc/en-us/article_attachments/115002367791/els_schema__1_.json there seems to be a timestamp field. Can you elaborate?