Someone familiar with migrating Legacy templates to Composable templates.

189 views
Skip to first unread message

Monica Wife

unread,
Feb 24, 2023, 10:12:06 AM2/24/23
to Wazuh mailing list
I need to migrate Legacy templates to Composable templates. I was thinking about copying the Legacy templates adapting them to the new format of the Composable templates. Anyone familiar with it and can share an example!. Thank you

Maximiliano Ibarra

unread,
Feb 24, 2023, 10:43:13 AM2/24/23
to Wazuh mailing list
Hi Monica.
First of all, thanks for contacting us and using Wazuh.
I'm sorry to tell you so far Wazuh doesn't support Composable templates yet.
With the new Elasticsearch template formatting, it would be necessary to migrate our current template for Elasticsearch to this new format.
Researching in our communities channels (slack and here). 
I found a video that could help you:
Composable Index Templates - Daily Elastic Byte S01E02 in which they explain the differences in detail and also show step-by-step how you can create composable index templates.
Also, I suggest you read the elasticsearch documentation or contact them for more details.
 I hope this could help you.
Best regards.
Reply all
Reply to author
Forward
0 new messages