Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-14 12:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Minor documentation formatting change

Browse source
This commit is contained in:
Vlad Grigorescu 2012-06-03 22:59:29 -04:00
parent b3216906fe
commit 360d7e2eda
1 changed files with 6 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

18
doc/logging-elasticsearch.rst
View file

@ -73,18 +73,12 @@ Configuring ElasticSearch
Bro's ElasticSearch writer comes with a few configuraiton options::
- cluster_name:: Currently unused.
- server_host:: Where to send the data. Default localhost.
- server_port:: What port to send the data to. Default 9200.
- index_name:: ElasticSearch indexes are like databases in a standard DB model.
This is the name of the index to which to send the data. Default bro-logs.
- type_prefix:: ElasticSearch types are like tables in a standard DB model.
This is a prefix that gets prepended to Bro log names.
Example: type_prefix = "bro_" would create types "bro_dns", "bro_http", etc.
Default: none.
- batch_size:: How many messages to buffer before sending to ElasticSearch.
This is mainly a memory optimization - changing this doesn't seem to affect
indexing performance that much. Default: 10,000.
- cluster_name: Currently unused.
- server_host: Where to send the data. Default localhost.
- server_port: What port to send the data to. Default 9200.
- index_name: ElasticSearch indexes are like databases in a standard DB model. This is the name of the index to which to send the data. Default bro-logs.
- type_prefix: ElasticSearch types are like tables in a standard DB model. This is a prefix that gets prepended to Bro log names. Example: type_prefix = "bro_" would create types "bro_dns", "bro_http", etc. Default: none.
- batch_size: How many messages to buffer before sending to ElasticSearch. This is mainly a memory optimization - changing this doesn't seem to affect indexing performance that much. Default: 10,000.
TODO
----