func (out *ElasticsearchOutputType) EnableTTL() error {
setting := map[string]interface{}{
"server-ip": map[string]interface{}{
"_ttl": map[string]string{"enabled": "true", "default": "15000"},
},
}
// Make sure the index exists, but ignore errors (probably exists already)
core.Index("packetbeat-topology", "", "", nil, nil)
_, err := core.Index("packetbeat-topology", "server-ip", "_mapping", nil, setting)
if err != nil {
return err
}
return nil
}
func (out *ElasticsearchOutputType) PublishEvent(event *Event) error {
index := fmt.Sprintf("%s-%d.%02d.%02d", out.Index, event.Timestamp.Year(), event.Timestamp.Month(), event.Timestamp.Day())
_, err := core.Index(index, event.Type, "", nil, event)
DEBUG("output_elasticsearch", "Publish event")
return err
}