Elastic Search

Seth,

I read on the security-onion list that Bro’s Elastic Search writer doesn’t write the correct metadata indexes for use with Kibana. Can you elaborate?

https://groups.google.com/forum/#!topic/security-onion/mmxZfVfO0D0

Also, I read in the comments of “elasticsearch.bro” that there is some sort of memory leak either in the elastic search writer or elastic search itself? Can you also elaborate on this?

http://www.bro-project.org/sphinx-git/_downloads/elasticsearch.bro

Thanks!!