Home | About | Sematext search-lucene.com search-hadoop.com
 Search Hadoop and all its subprojects:

Switch to Threaded View
Flume, mail # dev - Review Request 20601: Flume-2273 ElasticSearchSink: Add handling for header substitution in indexName and indexType


Copy link to this message
-
Re: Review Request 20601: Flume-2273 ElasticSearchSink: Add handling for header substitution in indexName and indexType
Edward Sargisson 2014-04-29, 23:32

This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/20601/#review41786

flume-ng-doc/sphinx/FlumeUserGuide.rst
<https://reviews.apache.org/r/20601/#comment75384>

    substituion should be spelt substitution.
    
    I would probably also add that the date time will be appended to substituted values too.

flume-ng-sinks/flume-ng-elasticsearch-sink/src/main/java/org/apache/flume/sink/elasticsearch/AbstractElasticSearchIndexRequestBuilderFactory.java
<https://reviews.apache.org/r/20601/#comment75385>

    Is there anyway this substitution can be used as an attack? i.e. we are now allowing event submitters to provide part of the URL used to submit the event to elasticsearch (if using the REST client). Could an attacker craft something nefarious?
- Edward Sargisson
On April 22, 2014, 8:05 p.m., Satoshi Iijima wrote: