mdnuts
(mdnuts)
April 29, 2019, 11:50am
1
I’ve got my ROR set for
audit_collector: true
audit_index_template: “‘readonlyrest_audit’-yyyy”
Which works pretty decently (however I noticed there’s no way to lower shards from 5 to 1). But if connectivity is lost to the ES cluster, upon it’s re-connection indexes are created with the default readonlyrest_audit-yyyy-mm-dd, the following day it reverts back to readonlyrest_audit’-yyyy
sscarduzio
(Simone Scarduzio)
April 29, 2019, 4:26pm
2
Oh interesting bug! Will add it in backlog. Most likely at the end of this week, beginning next week will be handled.
coutoPL
(Mateusz Kołodziejczyk)
April 29, 2019, 6:34pm
3
did you check the newest version of ROR?
mdnuts
(mdnuts)
April 29, 2019, 7:14pm
4
unless there’s a new one since 4/22?
sscarduzio
(Simone Scarduzio)
April 29, 2019, 9:00pm
5
We released 1.17.6 very recently. It contains a rewrite of the majority of the code (including the audit log part)
mdnuts
(mdnuts)
April 30, 2019, 10:44am
6
I should have mentioned that.
i’ve got 1.17.6-pre1-20190422_es6.7.1
coutoPL
(Mateusz Kołodziejczyk)
April 30, 2019, 11:13am
7
@sscarduzio could you confirm that version mentioned above contains old core? Or maybe there is already the new one?
sscarduzio
(Simone Scarduzio)
April 30, 2019, 5:52pm
8
This looks like the file name of a kibana plugin package. We are interested in the Elasticsearch plugin.
I.e. from your elasticsearch folder:
elasticsearch-7.0.0 $ grep version= plugins/readonlyrest/*properties
version=1.17.6
java.version=1.8
elasticsearch.version=7.0.0
mdnuts
(mdnuts)
April 30, 2019, 5:56pm
9
ahh, I had 1.7.5 but this morning upgraded both KBN and ES to 1.7.6 production - I can test it tonight.
1 Like
coutoPL
(Mateusz Kołodziejczyk)
May 1, 2019, 8:38am
10
@mdnuts do you experience the same issue with 1.7.6?
mdnuts
(mdnuts)
May 1, 2019, 10:28am
11
yep, still created the readonlyrest_audit-yyyy-mm-dd index then resumed with the intended readonlyrest_audit-yyyy index once the new day started.
sscarduzio
(Simone Scarduzio)
July 8, 2019, 2:03pm
12
This should be fixed in 1.18.2 released today.