From 96a9b8b2696f96f9d3046935811cf783e4b52a05 Mon Sep 17 00:00:00 2001 From: Mario Jansen Date: Fri, 23 Jun 2023 13:59:50 +0200 Subject: [PATCH] if elasticsearch_version >= 7 we should not send the _type to elasticsearch, deprecated in es 7, obsolete in es 8 --- src/plugins/lua/elastic.lua | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/src/plugins/lua/elastic.lua b/src/plugins/lua/elastic.lua index b93186f9a9..ce2d01b80a 100644 --- a/src/plugins/lua/elastic.lua +++ b/src/plugins/lua/elastic.lua @@ -57,6 +57,7 @@ local settings = { no_ssl_verify = false, max_fail = 3, ingest_module = false, + elasticsearch_version = 6, } local function read_file(path) @@ -71,8 +72,13 @@ local function elastic_send_data(task) local es_index = os.date(settings['index_pattern']) local tbl = {} for _,value in pairs(rows) do - table.insert(tbl, '{ "index" : { "_index" : "'..es_index.. - '", "_type" : "_doc" ,"pipeline": "rspamd-geoip"} }') + if settings.elasticsearch_version >= 7 then + table.insert(tbl, '{ "index" : { "_index" : "'..es_index.. + '","pipeline": "rspamd-geoip"} }') + else + table.insert(tbl, '{ "index" : { "_index" : "'..es_index.. + '", "_type" : "_doc" ,"pipeline": "rspamd-geoip"} }') + end table.insert(tbl, ucl.to_format(value, 'json-compact')) end -- 2.47.3