parsedmarc icon indicating copy to clipboard operation
parsedmarc copied to clipboard

No indices created in opensearch

Open CDaut opened this issue 6 months ago • 0 comments

I have a dockerized installation of parsedmarc with opensearch. Parsedmarc has no problem connecting to the opensearch server but no indices are created when reports are parsed.

What I have done and what happens

  • set up stack
  • Move DMARC reports (all old ones I found, abt. 40) to DMARC mailbox
  • messages get analyzed and moved to corresponding archive folder correctly
  • look at indeces in opensearch

These are the indices I get:

> curl -XGET -u 'admin:<password>' https://localhost:9200/_cat/indices --insecure

green  open .opensearch-observability    N2OLhvQCRg2gX1pPVPT8qw 1 0  0 0   208b   208b
green  open .plugins-ml-config           eBWAderVS-ib-So-ja-GGw 1 0  1 0  3.9kb  3.9kb
yellow open security-auditlog-2024.08.08 4BFrOtTwSma9ZShM0H9-Hw 1 1 30 0 88.3kb 88.3kb
green  open .opendistro_security         enXA-tmPS021G-nY8QiiWw 1 0 10 0   80kb   80kb

As you can see no indices corresponding to parsedmarc are generated

Config

This is my parsedmarc.ini:

[general]
save_aggregate = True
save_forensic = True

[imap]
host = mail.<madomain>
user = dmarc@<mydomain>
password = <imap_password>

[mailbox]
watch = True
delete = False

[opensearch]
hosts = https://admin:<password>@opensearch:9200
ssl = True

Am I missing somnething? I can't see a config option to dedicatedly enable index creation. Do I just need to wait?

CDaut avatar Aug 08 '24 11:08 CDaut