GitHub user nickwallen opened a pull request:
https://github.com/apache/metron/pull/838
METRON-1310 "Template Delete" Action Deletes Search Indices
The "Elasticsearch Template Delete" action within the Indexing service in
Ambari, actually deletes the search indices. Per the name of the action, I
would expect it to only delete the template definitions. This can be quite a
fun surprise. :)
## Testing
1. Spin up Full Dev or an equivalent Metron environment.
1. Query Elasticsearch for the currently defined indices. Take note of all
the indices that you have defined.
```
curl http://node1:9200/_cat/indices?v
```
1. Query Elasticsearch for the currently defined templates. There should
be 5 in all; `snort_index`, `bro_index`, `metaalert_index`, `error_index`, and
`yaf_index`.
```
curl http://node1:9200/_template | python -mjson.tool
```
1. Open Ambari and go to Metron > Metron Indexing. Then on the hosts page,
click on Metron Indexing > Elasticsearch Template Delete.
1. Query Elasticsearch again for the currently defined indices. Make sure
none were deleted.
1. Query Elasticsearch again for the currently defined templates. There
should be none.
```
curl http://node1:9200/_template | python -mjson.tool
```
1. Open Ambari and go to Metron > Metron Indexing. Then on the hosts page,
click on Metron Indexing > Elasticsearch Template Install.
1. Query Elasticsearch again for the currently defined templates. There
should be at least 5 in all.
```
curl http://node1:9200/_template | python -mjson.tool
```
## Pull Request Checklist
- [ ] Is there a JIRA ticket associated with this PR? If not one needs to
be created at [Metron
Jira](https://issues.apache.org/jira/browse/METRON/?selectedTab=com.atlassian.jira.jira-projects-plugin:summary-panel).
- [ ] Does your PR title start with METRON-XXXX where XXXX is the JIRA
number you are trying to resolve? Pay particular attention to the hyphen "-"
character.
- [ ] Has your PR been rebased against the latest commit within the target
branch (typically master)?
- [ ] Have you included steps to reproduce the behavior or problem that is
being changed or addressed?
- [ ] Have you included steps or a guide to how the change may be verified
and tested manually?
- [ ] Have you ensured that the full suite of tests and checks have been
executed in the root metron folder via:
- [ ] Have you written or updated unit tests and or integration tests to
verify your changes?
- [ ] If adding new dependencies to the code, are these dependencies
licensed in a way that is compatible for inclusion under [ASF
2.0](http://www.apache.org/legal/resolved.html#category-a)?
- [ ] Have you verified the basic functionality of the build by building
and running locally with Vagrant full-dev environment or the equivalent?
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/nickwallen/metron METRON-1310
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/metron/pull/838.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #838
----
commit 6565b351b0a75aff87acce97afd36978bea00e93
Author: Nick Allen <n...@nickallen.org>
Date: 2017-11-09T17:41:48Z
METRON-1310 "Template Delete" Action Deletes Search Indices
----
---
