_bulk api call not compatible with ES 6.2

[dr3s]

I can't say if this is a bug because I don't really know the intent of the code. It seems that _bulk is being used in order to send multiple events to ES.

One thing I noticed is that the endpoint used is not _bulk for the configured index but at the ES app root. The index endpoint is preferred: /{index}/_bulk or {index}/{type}/_bulk instead of /_bulk

\r\n is being used in the payload which is not allowed except for delimiting records.

It could be that a recent ES version changed the format but the docs don't specify a required version. The payload seems all wrong for the bulk API.

[alhardy]

There are signaficant changes in ES 6, more discussion here.

Sorry, docs should specify the supported version, I'll have a look at that.

At the moment I don't have capacity to look into ES 6. PRs very welcomed.