mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
93813a5079
It seems TS_MILLIS is specifically for Elasticsearch and starting with Elasticsearch 8.2 epoch_millis does (again?) support negative epoch_millis, so make Zeek produce that by default. If this breaks a given deployment, they can switch Zeek back to TS_MILLIS_UNSIGNED. https://discuss.elastic.co/t/migration-from-es-6-8-to-7-17-issues-with-negative-date-epoch-timestamp/335259 https://github.com/elastic/elasticsearch/pull/80208 Thanks for @timo-mue for reporting! Closes #4494 |
||
|---|---|---|
| .. | ||
| analyzer | ||
| cluster | ||
| config | ||
| control | ||
| file-analysis | ||
| input | ||
| intel | ||
| logging | ||
| netcontrol | ||
| notice | ||
| openflow | ||
| packet-filter | ||
| reporter | ||
| software | ||
| storage | ||
| sumstats | ||
| telemetry | ||