Elastalert: elasticsearch 6.x support

[zozo6015]

Hello,

I needed to upgrade my elasticsearch installation to 6.0.0-rc1 and since then the elastalert is giving alot of errors. Is there in plan to make it compatible with it anytime soon?

[Qmando]

Depends on your definition of anytime soon ;)

I probably won't be adding it soon, especially not before it's out of beta, but I am always accepting pull requests.

[CodingSpiderFox]

I would like to be able to use elasticsearch 6.x, too

[CodingSpiderFox]

Elastic Stack 6.0.0 stable was released today. Time to move into the next era of elasticsearch

[emhlbmc]

@zozo6015 if you have old index elastalert_status created before version 6.0, you can use #1426 , a temporary solution.

[dougburks]

Is there an ETA for ES 6.x support? Thanks!

[CodingSpiderFox]

Is anyone already working on native Elasticsearch 6 support?

[CodingSpiderFox]

1426 works somehow but I get duplicated issues in JIRA

[xlucas]

The documentation states "ElastAlert works with all versions of Elasticsearch.". It should be updated to mention this limitation.

[GoodMirek]

Seems as a duplicate of now closed #1427.
If you are using old index elastalert_status created before 6.0.0, have a look at #1426.

[phoenixjun]

The same issue still exist when trying to use ealstalert on docker for ES6.1. any ETA for adding support to ES 6?

[javadevmtl]

+1

[Qmando]

This already is supported.