{"action":"created","issue":{"url":"https://api.github.com/repos/Yelp/elastalert/issues/790","repository_url":"https://api.github.com/repos/Yelp/elastalert","labels_url":"https://api.github.com/repos/Yelp/elastalert/issues/790/labels{/name}","comments_url":"https://api.github.com/repos/Yelp/elastalert/issues/790/comments","events_url":"https://api.github.com/repos/Yelp/elastalert/issues/790/events","html_url":"https://github.com/Yelp/elastalert/issues/790","id":186799572,"number":790,"title":"Integration with elasticsearch v5","user":{"login":"rauizab","id":7595860,"avatar_url":"https://avatars.githubusercontent.com/u/7595860?v=3","gravatar_id":"","url":"https://api.github.com/users/rauizab","html_url":"https://github.com/rauizab","followers_url":"https://api.github.com/users/rauizab/followers","following_url":"https://api.github.com/users/rauizab/following{/other_user}","gists_url":"https://api.github.com/users/rauizab/gists{/gist_id}","starred_url":"https://api.github.com/users/rauizab/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rauizab/subscriptions","organizations_url":"https://api.github.com/users/rauizab/orgs","repos_url":"https://api.github.com/users/rauizab/repos","events_url":"https://api.github.com/users/rauizab/events{/privacy}","received_events_url":"https://api.github.com/users/rauizab/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":28,"created_at":"2016-11-02T13:24:46Z","updated_at":"2016-11-16T23:00:16Z","closed_at":null,"body":"Hi\r\n\r\nI know that the new version v5 of elasticsearch has just being released, but do you know when it will be available the integration of elastalert with the new version? At the moment I am getting:\r\n\r\n> INFO:elastalert:Starting up\r\nWARNING:elasticsearch:POST http://elasticsearch:9200/elastalert_status/elastalert/_search?size=1000 [status:400 request:0.013s]\r\nWARNING:elasticsearch:POST http://elasticsearch:9200/elastalert_status/elastalert_status/_search?_source_include=endtime%2Crule_name&size=1 [status:400 request:0.002s]\r\nERROR:root:Error querying for last run: TransportError(400, {u'line': 1, u'root_cause': [{u'reason': u'Unknown key for a START_OBJECT in [filter].', u'type': u'parsing_exception', u'line': 1, u'col': 12}], u'type': u'parsing_exception', u'reason': u'Unknown key for a START_OBJECT in [filter].', u'col': 12})\r\nWARNING:elasticsearch:POST http://elasticsearch:9200/elastalert_status/elastalert_error?op_type=create [status:400 request:0.003s]\r\nERROR:root:Error writing alert info to elasticsearch: TransportError(400, {u'root_cause': [{u'reason': u'Validation Failed: 1: an id must be provided if version type or value are set;', u'type': u'action_request_validation_exception'}], u'type': u'action_request_validation_exception', u'reason': u'Validation Failed: 1: an id must be provided if version type or value are set;'})\r\nTraceback (most recent call last):\r\n  File \"/opt/elastalert/elastalert/elastalert.py\", line 1033, in writeback\r\n    doc_type=doc_type, body=body)\r\n  File \"/usr/lib/python2.7/site-packages/elasticsearch/client/utils.py\", line 68, in _wrapped\r\n    return func(*args, params=params, **kwargs)\r\n  File \"/usr/lib/python2.7/site-packages/elasticsearch/client/__init__.py\", line 227, in create\r\n    return self.index(index, doc_type, body, id=id, params=params, op_type='create')\r\n  File \"/usr/lib/python2.7/site-packages/elasticsearch/client/utils.py\", line 68, in _wrapped\r\n    return func(*args, params=params, **kwargs)\r\n  File \"/usr/lib/python2.7/site-packages/elasticsearch/client/__init__.py\", line 257, in index\r\n    _make_path(index, doc_type, id), params=params, body=body)\r\n  File \"/usr/lib/python2.7/site-packages/elasticsearch/transport.py\", line 301, in perform_request\r\n    status, headers, data = connection.perform_request(method, url, params, body, ignore=ignore, timeout=timeout)\r\n  File \"/usr/lib/python2.7/site-packages/elasticsearch/connection/http_requests.py\", line 72, in perform_request\r\n    self._raise_error(response.status_code, raw_data)\r\n  File \"/usr/lib/python2.7/site-packages/elasticsearch/connection/base.py\", line 102, in _raise_error\r\n    raise HTTP_EXCEPTIONS.get(status_code, TransportError)(status_code, error_message, additional_info)\r\nRequestError: TransportError(400, {u'root_cause': [{u'reason': u'Validation Failed: 1: an id must be provided if version type or value are set;', u'type': u'action_request_validation_exception'}], u'type': u'action_request_validation_exception', u'reason': u'Validation Failed: 1: an id must be provided if version type or value are set;'})\r\nWARNING:elasticsearch:GET http://elasticsearch:9200/payment-*/_search?_source_include=eventtime%2C%2A%2CuserId&ignore_unavailable=true&size=10000 [status:400 request:0.003s]\r\nERROR:root:Error running query: TransportError(400, {u'line': 1, u'root_cause': [{u'reason': u'no [query] registered for [filtered]', u'type': u'parsing_exception', u'line': 1, u'col': 67}], u'type': u'parsing_exception', u'reason': u'no [query] registered for [filtered]', u'col': 67})\r\nWARNING:elasticsearch:POST http://elasticsearch:9200/elastalert_status/elastalert_error?op_type=create [status:400 request:0.003s]\r\nERROR:root:Error writing alert info to elasticsearch: TransportError(400, {u'root_cause': [{u'reason': u'Validation Failed: 1: an id must be provided if version type or value are set;', u'type': u'action_request_validation_exception'}], u'type': u'action_request_validation_exception', u'reason': u'Validation Failed: 1: an id must be provided if version type or value are set;'})\r\nTraceback (most recent call last):\r\n  File \"/opt/elastalert/elastalert/elastalert.py\", line 1033, in writeback\r\n    doc_type=doc_type, body=body)\r\n  File \"/usr/lib/python2.7/site-packages/elasticsearch/client/utils.py\", line 68, in _wrapped\r\n    return func(*args, params=params, **kwargs)\r\n  File \"/usr/lib/python2.7/site-packages/elasticsearch/client/__init__.py\", line 227, in create\r\n    return self.index(index, doc_type, body, id=id, params=params, op_type='create')\r\n  File \"/usr/lib/python2.7/site-packages/elasticsearch/client/utils.py\", line 68, in _wrapped\r\n    return func(*args, params=params, **kwargs)\r\n  File \"/usr/lib/python2.7/site-packages/elasticsearch/client/__init__.py\", line 257, in index\r\n    _make_path(index, doc_type, id), params=params, body=body)\r\n  File \"/usr/lib/python2.7/site-packages/elasticsearch/transport.py\", line 301, in perform_request\r\n    status, headers, data = connection.perform_request(method, url, params, body, ignore=ignore, timeout=timeout)\r\n  File \"/usr/lib/python2.7/site-packages/elasticsearch/connection/http_requests.py\", line 72, in perform_request\r\n    self._raise_error(response.status_code, raw_data)\r\n  File \"/usr/lib/python2.7/site-packages/elasticsearch/connection/base.py\", line 102, in _raise_error\r\n    raise HTTP_EXCEPTIONS.get(status_code, TransportError)(status_code, error_message, additional_info)\r\nRequestError: TransportError(400, {u'root_cause': [{u'reason': u'Validation Failed: 1: an id must be provided if version type or value are set;', u'type': u'action_request_validation_exception'}], u'type': u'action_request_validation_exception', u'reason': u'Validation Failed: 1: an id must be provided if version type or value are set;'})\r\nINFO:elastalert:Ran User1111MakePayment from 2016-11-02 08:20 UTC to 2016-11-02 13:20 UTC: 0 query hits, 0 matches, 0 alerts sent\r\n\r\nThanks for this great tool!!!!"},"comment":{"url":"https://api.github.com/repos/Yelp/elastalert/issues/comments/261100618","html_url":"https://github.com/Yelp/elastalert/issues/790#issuecomment-261100618","issue_url":"https://api.github.com/repos/Yelp/elastalert/issues/790","id":261100618,"user":{"login":"stumyp","id":5258641,"avatar_url":"https://avatars.githubusercontent.com/u/5258641?v=3","gravatar_id":"","url":"https://api.github.com/users/stumyp","html_url":"https://github.com/stumyp","followers_url":"https://api.github.com/users/stumyp/followers","following_url":"https://api.github.com/users/stumyp/following{/other_user}","gists_url":"https://api.github.com/users/stumyp/gists{/gist_id}","starred_url":"https://api.github.com/users/stumyp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stumyp/subscriptions","organizations_url":"https://api.github.com/users/stumyp/orgs","repos_url":"https://api.github.com/users/stumyp/repos","events_url":"https://api.github.com/users/stumyp/events{/privacy}","received_events_url":"https://api.github.com/users/stumyp/received_events","type":"User","site_admin":false},"created_at":"2016-11-16T23:00:16Z","updated_at":"2016-11-16T23:00:16Z","body":"@Qmando : I believe it should look like\r\n```\r\nquery:\r\n  bool:\r\n    must: [filters from rule here]\r\n```"}}
{"actor":{"display_login":"stumyp"}}