Support Questions

Find answers, ask questions, and share your expertise

Metron Cannot write to ElasticSearch

avatar
Contributor

I tried to add new telemetry sensor on metron. on Metron management UI and STORM UI the sensor shows it running and transmitting. but the ElasticSearch won't create index for the sensor.

Please Help. Thanks

1 ACCEPTED SOLUTION

avatar
Contributor
4 REPLIES 4

avatar
Contributor

Addition, after i try and make the parser error, the error successfully sent to elastic search and hdfs with the error index. But if the parser is right it failed to sent to elasticsearch and HDFS

avatar
Contributor

avatar
Explorer

i have the same issue. But i use logstash storm didnt throw any errors but index is not created? Any idea what to do next?

avatar
Contributor

i never used storm with logstash, but in my case i need to specify the field of the log which will be used for timestamp.

example : there is timestamp field in my log, and i named it 'timestamp'. then i need to specify that 'timestamp' field will be used as timestamp which will be sent to elasticsearch. and after that my problem solved.

hope it helps