bro-elk-IDS
bro-elk-IDS copied to clipboard
Support for Logstash 5.0.1?
Error with Logstash 5.0.1: [logstash.inputs.bro ] each: watched?: /nsm/bro/logs/current/weird.log: (#<NoMethodError: Direct event field references (i.e. event['field']) have been disabled in favor of using event get and set methods (e.g. event.get('field')). Please consult the Logstash 5.0 breaking changes documentation for more details.>)
Is there any planning for an update to Logstash 5.0.1?
Sorry @masterjohn2016 I've been slacking, will fix today.
Hello, getting 2 errors:
[2016-12-05T14:15:20,265][ERROR][logstash.pipeline ] A plugin had an unrecoverable error. Will restart this plugin. Plugin: <LogStash::Inputs::Bro type=>"ssl", path=>"/bro/logs/current/ssl.log", start_position=>"beginning", sincedb_path=>"/dev/null", id=>"60289ca070d9b9f6ca6d7c5f0d7ef582a3568ea9-24", enable_metric=>true, codec=><LogStash::Codecs::Plain id=>"plain_cc96255b-74c5-46bb-9ff3-b4662e5cfecc", enable_metric=>true, charset=>"UTF-8">, stat_interval=>1, discover_interval=>15, sincedb_write_interval=>15, delimiter=>"\n"> Error: Direct event field references (i.e. event['field']) have been disabled in favor of using event get and set methods (e.g. event.get('field')). Please consult the Logstash 5.0 breaking changes documentation for more details.
how to fix it? Thanks
Hello, @BrashEndeavours , any chance to solve this error?