es-rest: Non-persisted events overwrite single ES document with id=0

Description

If you set the es-rest forwarder to 'forwardAllEvents', events that are not persisted to the database are stored in the same, single ES document with the 'id' of zero. Subsequent events overwrite the document with a new version of the same document instead of generating additional documents.

We need to change the forwarder so that even if incoming events do not have database IDs, they generate separate ES documents.

Acceptance / Success Criteria

None

Lucidchart Diagrams

Activity

Seth Leger January 25, 2017 at 8:21 AM

This needs to be tested on various versions of Elasticsearch because the behavior seems to be different on 1.7 and 2.4.

Fixed

Details

PagerDuty

Created January 20, 2017 at 6:21 PM
Updated January 27, 2017 at 3:22 PM
Resolved January 27, 2017 at 10:31 AM
Loading...