Skip to content

Missing (ECS) schema for ES 8.0 #1022

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
Tracked by #11635
kares opened this issue Jun 22, 2021 · 3 comments
Closed
Tracked by #11635

Missing (ECS) schema for ES 8.0 #1022

kares opened this issue Jun 22, 2021 · 3 comments
Assignees
Labels

Comments

@kares
Copy link
Contributor

kares commented Jun 22, 2021

Logstash snapshot 8.0.0-SNAPSHOT with ES snapshot 8.0.0-SNAPSHOT fails to start.

Since elastic/logstash#12830 LS enabled ecs_compatibility => v1 default for 8.0 (SNAPSHOT).
When running against (unreleased) ES 8.0 loading the plugin fails due a missing schema file for version 8, leading to a:

[logstash.outputs.elasticsearch][main] Failed to install template {:message=>"Failed to load default template for Elasticsearch v8 with ECS v1; caused by: #<ArgumentError: Template file '/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.0.2-java/lib/logstash/outputs/elasticsearch/templates/ecs-v1/elasticsearch-8x.json' could not be found>", :exception=>RuntimeError, :backtrace=>
@kares kares changed the title missing schema for ES 8.0 Missing (ECS) schema for ES 8.0 Jun 22, 2021
@yaauie yaauie self-assigned this Jun 22, 2021
@yaauie
Copy link
Contributor

yaauie commented Jun 22, 2021

Assigning to myself.

ECS v1 doesn't include a generated template for Elasticsearch 8, so our vendor scripts will need to be modified. I've got a WIP that symlinks additional variants (EDIT: template shape changed, solution will need more than just symlink), and am making another pass at the specs to make sure that they really make sense in terms of the default value changing recently in Logstash core.

@kares
Copy link
Contributor Author

kares commented Jul 26, 2021

related issue (a request to update the templates for v1): #1027

@roaksoax
Copy link
Contributor

This issue has now been fixed as the templates are now available for the expected releases.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

3 participants