Commit graph

15 commits

Author SHA1 Message Date
Seth Hall
95f4390cb6 Adding an extra header. 2012-06-18 02:03:43 -04:00
Seth Hall
52ceee8c86 Fixed a bug with messed up time value passing to elasticsearch. 2012-06-18 01:31:52 -04:00
Seth Hall
cb7eac212e Small updates and a little standardization for config.h.in naming. 2012-06-17 22:55:11 -04:00
Seth Hall
57980c86e6 Bug fixes.
- The curl handle is now cleaned up correctly.

- Interval values are now treated as doubles.  Treating them as uint64_t
  was wrong because intervals can be negative.  There is also no obvious
  benefit in elasticsearch to converting the value to milliseconds.
2012-06-17 21:41:29 -04:00
Seth Hall
cd8169dda3 Bug fix and feature.
- Fixed bug with how data is sent to elasticsearch.

- Added a feature to only allow data of a certain
  size to be buffered before sending to the
  elasticsearch server.  Configured with the
  LogElasticSearch::max_byte_size variable.
2012-06-16 22:22:40 -04:00
Seth Hall
b1561437e9 Forgot to call the parent method for DoHeartBeat. 2012-06-16 00:35:40 -04:00
Seth Hall
8334dceadb Changed the escaping method. 2012-06-15 22:19:51 -04:00
Seth Hall
ca5eb5382a Flush logs to ES daemon as Bro is shutting down. 2012-06-15 21:06:06 -04:00
Seth Hall
a4df914ab7 Reduce the batch size to 1000 and add a maximum time interval for batches. 2012-06-15 20:53:09 -04:00
Seth Hall
0bb8b69c95 Reworked bulk operation string construction to use ODesc and added json escaping. 2012-06-15 16:30:54 -04:00
Vlad Grigorescu
5e05e548ff Change time printf format to use the more compatible PRIu64. 2012-06-05 23:20:28 -04:00
Vlad Grigorescu
894dec0069 No quotes for times and doubles, since ES won't interpret them as numbers then. 2012-06-05 23:01:36 -04:00
Vlad Grigorescu
5db027e39f Fix timestamp overflow bug. 2012-06-05 17:23:50 -04:00
Vlad Grigorescu
7bee0b0d8e Added sending messages to ElasticSearch over HTTP. 2012-06-03 22:07:20 -04:00
Vlad Grigorescu
95f000738b ElasticSearch log writer implementation test 1 - writes out JSON to file instead of sending it over HTTP for now. 2012-06-03 12:40:09 -04:00