Skip to content
This repository has been archived by the owner on Aug 31, 2022. It is now read-only.

Opensearch sink #174

Open
Willem1987 opened this issue Dec 15, 2021 · 1 comment
Open

Opensearch sink #174

Willem1987 opened this issue Dec 15, 2021 · 1 comment

Comments

@Willem1987
Copy link

Recently Opendistro for Elasticsearch continued as OpenSearch. This project has it's own go client.

Requesting for an Opensearch sink based on elasticsearch client using https://github.com/opensearch-project/opensearch-go . The es7 sink will work for now, but this is unsure looking forward.

@akshar-rafay
Copy link

akshar-rafay commented May 6, 2022

Is there an update on this? We're trying to use the Elasticsearch sink itself to push to an Opensearch instance but that doesn't seem to be working
We're getting the following error

{"level":"error","time":"2022-04-20T11:33:58Z","caller":"/app/pkg/sinks/elasticsearch.go:144","message":"Indexing failed: {\"error\":{\"root_cause\":[{\"type\":\"mapper_parsing_exception\",\"reason\":\"object mapping for [involvedObject.labels.istio] tried to parse field [istio] as object, but found a concrete value\"}],\"type\":\"mapper_parsing_exception\",\"reason\":\"object mapping for [involvedObject.labels.istio] tried to parse field [istio] as object, but found a concrete value\"},\"status\":400}"}

This is our configmap

logLevel: error
logFormat: json
route:
  routes:
    - drop:
        - type: "Normal"
      match:
        - kind: "Pod|Deployment"
          receiver: "dump"

receivers:
- name: "dump"
  elasticsearch:
    hosts:
    - <AWS_Opensearch_endpoint>
    index: kube-events
    indexFormat: "kube-events-{2006-01-02}"
    useEventID: true

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants