kubernetes-event-exporter icon indicating copy to clipboard operation
kubernetes-event-exporter copied to clipboard

Opensearch sink

Open Willem1987 opened this issue 3 years ago • 1 comments

Recently Opendistro for Elasticsearch continued as OpenSearch. This project has it's own go client.

Requesting for an Opensearch sink based on elasticsearch client using https://github.com/opensearch-project/opensearch-go . The es7 sink will work for now, but this is unsure looking forward.

Willem1987 avatar Dec 15 '21 19:12 Willem1987

Is there an update on this? We're trying to use the Elasticsearch sink itself to push to an Opensearch instance but that doesn't seem to be working We're getting the following error

{"level":"error","time":"2022-04-20T11:33:58Z","caller":"/app/pkg/sinks/elasticsearch.go:144","message":"Indexing failed: {\"error\":{\"root_cause\":[{\"type\":\"mapper_parsing_exception\",\"reason\":\"object mapping for [involvedObject.labels.istio] tried to parse field [istio] as object, but found a concrete value\"}],\"type\":\"mapper_parsing_exception\",\"reason\":\"object mapping for [involvedObject.labels.istio] tried to parse field [istio] as object, but found a concrete value\"},\"status\":400}"}

This is our configmap

logLevel: error
logFormat: json
route:
  routes:
    - drop:
        - type: "Normal"
      match:
        - kind: "Pod|Deployment"
          receiver: "dump"

receivers:
- name: "dump"
  elasticsearch:
    hosts:
    - <AWS_Opensearch_endpoint>
    index: kube-events
    indexFormat: "kube-events-{2006-01-02}"
    useEventID: true

akshar-rafay avatar May 06 '22 11:05 akshar-rafay