search

robcowart / synesis_lite_suricata

Suricata IDS/IPS log analytics using the Elastic Stack.
Other
233 stars 92 forks source link

Elasticsearch Index Templates incompatible with ES 7.x #9

Closed mrplow87 closed 5 years ago

mrplow87 commented 5 years ago

The import of the Elasticsearch index templates by Logstash is incompatible with Elasticsearch 7.x, since they removed mapping types:

https://www.elastic.co/guide/en/elasticsearch/reference/current/removal-of-types.html

curl -X PUT http://127.0.0.1:9200/_template/synlite-suricata-1.0.1 -H "Content-Type: application/json" -H "kbn-xsrf: true" -d @synlite_suricata.template.json 

{"error":{"root_cause":[{"type":"mapper_parsing_exception","reason":"Root mapping definition has unsupported parameters:  [_default_ : {numeric_detection=true,
robcowart commented 5 years ago

Yes. Elastic Stack 7.x support will be coming in the next week or two.

robcowart commented 5 years ago

Release v1.1.0 is now available for Elastic Stack 7.x.