naxsi icon indicating copy to clipboard operation
naxsi copied to clipboard

nxapi/nxtools.py support ES 6.x

Open volp1s opened this issue 7 years ago • 3 comments

At this moment nxapi/nxtools.py supports only Elasticsearch 1 / 2 / 5 Why this limitation? Is this compatibility planned to be extended? I'm trying to get this working with ES 6.1 Thx

volp1s avatar Dec 14 '17 12:12 volp1s

Hello, We don't use ES6 yet. If you happen to make it work, we'll gladly review and merge MR ;)

buixor avatar Dec 14 '17 16:12 buixor

Hi, Just need to replace all "2", "5" by "2", "5", "6" in the nxtransform.py file ES 5 and 6 seems to have a good backward compatibility It has worked fine for me, no troubles by now

stephanelange avatar Jul 02 '18 07:07 stephanelange

Watch out for using paths you might expect the shell to expand. I was getting a Unable to create the index/collection : nxapi events, Error: create() takes at least 5 arguments (5 given) and it looked like the error log file had been ignored:

./nxtool.py -c nxapi.json --files=~/nginx/log/error.log
# size :1000
Unable to create the index/collection : nxapi events, Error: create() takes at least 5 arguments (5 given)
WARNING:root:List of files :[]

The ~ didn't get expanded by python. But using:

./nxtool.py -c nxapi.json --files=/Users/jay/nginx/log/error.log

caused all the log entries to get added to the nxapi elasticsearch index.

jaygooby avatar Oct 22 '18 15:10 jaygooby