parsedmarc
parsedmarc copied to clipboard
No indices created in opensearch
I have a dockerized installation of parsedmarc with opensearch. Parsedmarc has no problem connecting to the opensearch server but no indices are created when reports are parsed.
What I have done and what happens
- set up stack
- Move DMARC reports (all old ones I found, abt. 40) to DMARC mailbox
- messages get analyzed and moved to corresponding archive folder correctly
- look at indeces in opensearch
These are the indices I get:
> curl -XGET -u 'admin:<password>' https://localhost:9200/_cat/indices --insecure
green open .opensearch-observability N2OLhvQCRg2gX1pPVPT8qw 1 0 0 0 208b 208b
green open .plugins-ml-config eBWAderVS-ib-So-ja-GGw 1 0 1 0 3.9kb 3.9kb
yellow open security-auditlog-2024.08.08 4BFrOtTwSma9ZShM0H9-Hw 1 1 30 0 88.3kb 88.3kb
green open .opendistro_security enXA-tmPS021G-nY8QiiWw 1 0 10 0 80kb 80kb
As you can see no indices corresponding to parsedmarc are generated
Config
This is my parsedmarc.ini:
[general]
save_aggregate = True
save_forensic = True
[imap]
host = mail.<madomain>
user = dmarc@<mydomain>
password = <imap_password>
[mailbox]
watch = True
delete = False
[opensearch]
hosts = https://admin:<password>@opensearch:9200
ssl = True
Am I missing somnething? I can't see a config option to dedicatedly enable index creation. Do I just need to wait?