Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Code update for 6 version #2

Closed
netvoip opened this issue Apr 22, 2018 · 2 comments
Closed

Code update for 6 version #2

netvoip opened this issue Apr 22, 2018 · 2 comments

Comments

@netvoip
Copy link

netvoip commented Apr 22, 2018

Hi!
I'm new to ELK, trying to setup my new customization for cucm statistics. Have some problems on 6.2.4 due to changes of architecture, such as removal of mapping types.
I did some changes to get indexes working, but not very well. It would be great if author refurbish the code from his view and make more instructions how to adapt this config to the new installation, because this could be very valuable for many people.

Here is my config changes:

cucm-cdr.conf

input {
        file {
                path =>"/path-to-cdr/cdr*"
                start_position => "beginning"
        add_field => { "cucm_clustername" => "CUCM_Cluster_1" }
        }
}

filter {
                mutate { replace => { "type" => "cucm-cdr" } }
...
}


output {
	elasticsearch {
		index => "cucm-cdr-%{+YYYY.MM.dd}"
        	hosts => localhost 
		}	
}

cucm-cmr.conf

input {
        file {
                path =>"/path-to-cdr/cmr*"
                start_position => "beginning"
        add_field => { "cucm_clustername" => "CUCM_Cluster_1" }
        }
}

filter {
                mutate { replace => { "type" => "cucm-cmr" } }
...
}

output {
	elasticsearch {
		index => "cucm-cmr-%{+YYYY.MM.dd}"
        	hosts => localhost 
		}	

}

cucm-cdr.json

...
  "mappings": {
        "doc": {
            "_source":{"enabled":true},
            "properties": {
				"type" : { "type" : "keyword" },
...
				"origDeviceName" : { "type" : "keyword" , "index": "true"},
				"destDeviceName" : { "type" : "keyword" , "index": "true"},
...

cucm-cmr.json

...
    "mappings": {
        "doc": {
            "_source":{"enabled":true},
            "properties": {
				"type" : { "type" : "keyword" },
...
				"deviceName" : { "type" : "keyword" , "index": "true"},
...
@netvoip
Copy link
Author

netvoip commented Jul 24, 2018

Still no answer... Finally I dumped ELK and switched to Splunk which is way better, easier and less time consuming.

@damhau
Copy link
Owner

damhau commented Feb 2, 2021

sorry for not answering. I've built this 5 years ago for a customer and I haven't worked on it since.
I'll try to update it for ELK 6/7.

@damhau damhau closed this as completed Feb 2, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants