Is there a reason why the bro parser allows periods
<https://github.com/apache/incubator-metron/blob/master/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/bro/JSONCleaner.java#L56>
in the keys if we can't index it (ES 2.3.3 does not allow periods in
indexes)?  Would anybody be opposed to me modifying the bro parser to
rewrite "."s to "_"s for the short term, until we get ES upgraded
<https://issues.apache.org/jira/browse/METRON-939>?

Jon
-- 

Jon

Reply via email to