<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi all,</p>
<p>Good news, Stone Zach is able to make required changes for
ElasticSearch 7, see
<a class="moz-txt-link-freetext" href="https://github.com/certtools/intelmq/issues/1479#issuecomment-605454294">https://github.com/certtools/intelmq/issues/1479#issuecomment-605454294</a>
and <a class="moz-txt-link-freetext" href="https://github.com/certtools/intelmq/pull/1513">https://github.com/certtools/intelmq/pull/1513</a> - Thanks stone!<br>
</p>
<p>However the code for ES 7 is incompatible to the code for ES 5
and Stone can only support the ES 7 code. That would mean that -
if nothing changes - the support for ES 5 would be probably
dropped in the next feature release (2.2.0).</p>
<p>In parallel to these efforts, I welcome the contribution by Filip
to document how IntelMQ can be used to feed ES via Redis +
Logstash. Thanks!<br>
</p>
<p>Sebastian<br>
</p>
<div class="moz-cite-prefix">On 3/20/20 4:20 PM, Sebastian Wagner
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:4ab76099-8370-9a64-d1d9-ffd1f764750d@cert.at">
<pre class="moz-quote-pre" wrap="">Dear community,
The ElasticSearch bots, tests and tools in IntelMQ need some maintenance
which I am unable to provide. As ES is a very common tool I am sure that
there is know-how available in the community and we are able to continue
the support for it.
The oldest know issue is a broken unittest:
<a class="moz-txt-link-freetext" href="https://github.com/certtools/intelmq/issues/1480">https://github.com/certtools/intelmq/issues/1480</a>
But there are also incompatibilties with current ElasticSearch version,
e.g. I had problems with the elasticmapper tool using ES 7.6.1 (maybe
easy to fix).
Using 7.5.0 failed on the indices tests
<a class="moz-txt-link-freetext" href="https://github.com/certtools/intelmq/issues/1479">https://github.com/certtools/intelmq/issues/1479</a>
Further, the only supported elasticsearch python library version is
currently 'elasticsearch>=5.0.0,<6.0.0' while the latest release is 7.6.0.
Please consider contributing
best regards
Sebastian
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Intelmq-dev mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Intelmq-dev@lists.cert.at">Intelmq-dev@lists.cert.at</a>
<a class="moz-txt-link-freetext" href="https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev">https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
// Sebastian Wagner <a class="moz-txt-link-rfc2396E" href="mailto:wagner@cert.at"><wagner@cert.at></a> - T: +43 1 5056416 7201
// CERT Austria - <a class="moz-txt-link-freetext" href="https://www.cert.at/">https://www.cert.at/</a>
// Eine Initiative der nic.at GmbH - <a class="moz-txt-link-freetext" href="https://www.nic.at/">https://www.nic.at/</a>
// Firmenbuchnummer 172568b, LG Salzburg</pre>
</body>
</html>