{"action":"created","issue":{"url":"https://api.github.com/repos/spender-sandbox/cuckoo-modified/issues/325","repository_url":"https://api.github.com/repos/spender-sandbox/cuckoo-modified","labels_url":"https://api.github.com/repos/spender-sandbox/cuckoo-modified/issues/325/labels{/name}","comments_url":"https://api.github.com/repos/spender-sandbox/cuckoo-modified/issues/325/comments","events_url":"https://api.github.com/repos/spender-sandbox/cuckoo-modified/issues/325/events","html_url":"https://github.com/spender-sandbox/cuckoo-modified/issues/325","id":183649492,"number":325,"title":"Elasticsearch","user":{"login":"agaglia","id":19300056,"avatar_url":"https://avatars.githubusercontent.com/u/19300056?v=3","gravatar_id":"","url":"https://api.github.com/users/agaglia","html_url":"https://github.com/agaglia","followers_url":"https://api.github.com/users/agaglia/followers","following_url":"https://api.github.com/users/agaglia/following{/other_user}","gists_url":"https://api.github.com/users/agaglia/gists{/gist_id}","starred_url":"https://api.github.com/users/agaglia/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/agaglia/subscriptions","organizations_url":"https://api.github.com/users/agaglia/orgs","repos_url":"https://api.github.com/users/agaglia/repos","events_url":"https://api.github.com/users/agaglia/events{/privacy}","received_events_url":"https://api.github.com/users/agaglia/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-10-18T10:36:33Z","updated_at":"2016-10-25T13:29:20Z","closed_at":null,"body":"Hi, someone has configured Elasticsearch not only in search mode (searchonly = no)? If yes, there is some guidelines for configuration to follow? Thank you all."},"comment":{"url":"https://api.github.com/repos/spender-sandbox/cuckoo-modified/issues/comments/256034495","html_url":"https://github.com/spender-sandbox/cuckoo-modified/issues/325#issuecomment-256034495","issue_url":"https://api.github.com/repos/spender-sandbox/cuckoo-modified/issues/325","id":256034495,"user":{"login":"phate1","id":1298031,"avatar_url":"https://avatars.githubusercontent.com/u/1298031?v=3","gravatar_id":"","url":"https://api.github.com/users/phate1","html_url":"https://github.com/phate1","followers_url":"https://api.github.com/users/phate1/followers","following_url":"https://api.github.com/users/phate1/following{/other_user}","gists_url":"https://api.github.com/users/phate1/gists{/gist_id}","starred_url":"https://api.github.com/users/phate1/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/phate1/subscriptions","organizations_url":"https://api.github.com/users/phate1/orgs","repos_url":"https://api.github.com/users/phate1/repos","events_url":"https://api.github.com/users/phate1/events{/privacy}","received_events_url":"https://api.github.com/users/phate1/received_events","type":"User","site_admin":false},"created_at":"2016-10-25T13:29:20Z","updated_at":"2016-10-25T13:29:20Z","body":"did you get anywhere with this ? I have mine sending data to Elasticsearch but cuckoo can't read the fields correctly it seems so i cant access recent samples just says it doesnt exist now and looking at it in kibana is useless as most of the fields are all buried under the Calls field so that end up being one long bit of json output. doesnt seem to be ready the json structure correctly on my end. i get objects in arrays are not well-supported error against the calls field. I also see lots of fields that it gets from the elastic search mapping but states those fields are not in any documents.\r\n\r\nif i get anywhere ill update here but not much luck so far"}}
{"actor":{"display_login":"phate1"}}