Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cisco: Add warning about script compilations to docs #14789

Merged
merged 2 commits into from
Nov 27, 2019

Conversation

adriansr
Copy link
Contributor

The cisco/asa and cisco/ftd filesets can cause problems with the default script compilation settings in Elasticsearch. This PR adds a warning about it to the docs and some workarounds.

@elasticmachine
Copy link
Collaborator

Pinging @elastic/siem (Team:SIEM)

@adriansr adriansr requested a review from a team November 26, 2019 12:46
Copy link

@benskelker benskelker left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM
@dedemorton do you want to take a look?

Copy link
Contributor

@dedemorton dedemorton left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Added a couple of suggestions, but overall looks great.

on your cluster:

- {ref}/circuit-breaker.html#script-compilation-circuit-breaker[script.max_compilations_rate]:
Increase the default value of `75/5m` to at least `100/5m`.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Might be best to avoid mentioning the default here because defaults change over time, and this info is likely to get stale.

Copy link
Contributor

@dedemorton dedemorton Nov 26, 2019

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just to clarify... I mean that the ES docs should be the source of truth for ES defaults. We probably shouldn't mention them in the Beats docs if we can avoid it.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

makes complete sense, thanks

Increase the default value of `75/5m` to at least `100/5m`.

- {ref}/modules-scripting-using.html#modules-scripting-using-caching[script.cache_max_size]:
Increase the default value of `100` to at least `200` if using both filesets
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

same comment about defaults

@adriansr adriansr merged commit 629b2eb into elastic:master Nov 27, 2019
adriansr added a commit to adriansr/beats that referenced this pull request Jan 16, 2020
The cisco/asa and cisco/ftd filesets can cause problems with the default script compilation settings in Elasticsearch. This PR adds a warning about it to the docs and some workarounds.

(cherry picked from commit 629b2eb)
adriansr added a commit that referenced this pull request Jan 17, 2020
The cisco/asa and cisco/ftd filesets can cause problems with the default script compilation settings in Elasticsearch. This PR adds a warning about it to the docs and some workarounds.

(cherry picked from commit 629b2eb)
adriansr added a commit to adriansr/beats that referenced this pull request Jan 17, 2020
The cisco/asa and cisco/ftd filesets can cause problems with the default script compilation settings in Elasticsearch. This PR adds a warning about it to the docs and some workarounds.

(cherry picked from commit 629b2eb)
adriansr added a commit that referenced this pull request Jan 17, 2020
The cisco/asa and cisco/ftd filesets can cause problems with the default script compilation settings in Elasticsearch. This PR adds a warning about it to the docs and some workarounds.

(cherry picked from commit 629b2eb)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants