Results 24 comments of biolds

It looks like you have an outdated version of python-elasticsearch module, you can try to upgrade with: `pip install --upgrade requirements.txt`

Then it is probably an issue with the installation: the "No module named exceptions" indicates that the elasticsearch module was found, but not the exceptions.py file it should contain. A...

In /opt/scirius/rules/views.py, insert line 26 (just before the line that triggered the initial exception): ``` import elasticsearch raise Exception('elasticsearch path: %s' % elasticsearch.__file__) ``` This will show what elasticsearch library...

I'm forwarding data with the file module of filebeat (with Logstash and ES at version 7.17). I didn't do anything special or tried to enable ECS, though i see an...

Yes, the conf is similar to this one. It seems filebeat is actually adding the ecs field, as I can see when taking the suricata json as file input, and...

I'm not passing the `--ecs` flag when running evebox, and don't have option in the yaml file to specify it.

Please let me know if you prefer that i split it into multiple PR.

Yeah, I have changed the default codecs because Twitch does not provide VP9 and Opus, also it seems some VP9 format can't be played inside `` tags. Not sure what...

It may be just me that broke it when testing, but I've not seen the automatic switch occurred when the requested codec is missing, that's why I changed the default....

Yep, i've opened a separate MR.