Elasticsearch 2.0 dot problem

Zeek
1

Elasticsearch 2.0 doesn’t accept dots in fieldnames. Bro writes fieldnames with dots.
As a result bro data can not be written to Elasticsearch 2.0.
I have made 2 very small patches to bro/src/threading/formatters/JSON.h and
bro/src/threading/formatters/JSON.cc that solves this problem.

JSON.cc.patch (120 Bytes)

JSON.h.patch (31 Bytes)

2

Mind filing this as a ticket on tracker.bro.org with the pathces
attached? Thanks,

Robin

3

Do I have access to that ?