[syslog-ng] syslog-ng 3.7.2 + ES 2.2.0

[Peter Czanik]

Hi,

On 03/03/2016 11:22 PM, Robin Blanchard wrote:
> Hi,
>
> I'm trying to push from syslog-ng-3.7.2 (yum repo czanik-syslog-ng37) directly into a single-node ES 2.2.0 (yum repo elasticsearch-2.x).

The ES driver in syslog-ng 3.7 works only up to ElasticSearch 1.7.X. 
There were some major API changes with ES 2.X which broke it. The 
upcoming syslog-ng 3.8 will support also ES 2.X. Actually Fabien Wernli 
managed to backport it: https://github.com/balabit/syslog-ng/issues/967

Bye,

-- 
Peter Czanik (CzP) <peter.czanik at balabit.com>
BalaBit IT Security / syslog-ng upstream
http://czanik.blogs.balabit.com/
https://twitter.com/PCzanik