Some better elasticsearch reliability.

- Added a configurable option for timing out ES HTTP requests.

 - Stop sending reporter messages after one message for one failure.
This commit is contained in:
Seth Hall 2012-07-18 00:00:31 -04:00
parent 485e473561
commit 1fa182c169
4 changed files with 35 additions and 9 deletions

View file

@ -17,6 +17,9 @@ export {
## e.g. prefix = "bro_" would create types of bro_dns, bro_software, etc.
const type_prefix = "" &redef;
## The time before an ElasticSearch transfer will timeout.
const transfer_timeout = 2secs;
## The batch size is the number of messages that will be queued up before
## they are sent to be bulk indexed.
## Note: this is mainly a memory usage parameter.