Skip to content

Cisco: Add warning about script compilations to docs#14789

Merged
adriansr merged 2 commits intoelastic:masterfrom
adriansr:doc_cisco_scripts
Nov 27, 2019
Merged

Cisco: Add warning about script compilations to docs#14789
adriansr merged 2 commits intoelastic:masterfrom
adriansr:doc_cisco_scripts

Conversation

@adriansr
Copy link
Copy Markdown
Contributor

The cisco/asa and cisco/ftd filesets can cause problems with the default script compilation settings in Elasticsearch. This PR adds a warning about it to the docs and some workarounds.

@elasticmachine
Copy link
Copy Markdown
Contributor

Pinging @elastic/siem (Team:SIEM)

@adriansr adriansr requested a review from a team November 26, 2019 12:46
Copy link
Copy Markdown

@benskelker benskelker left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM
@dedemorton do you want to take a look?

Copy link
Copy Markdown
Contributor

@dedemorton dedemorton left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Added a couple of suggestions, but overall looks great.

on your cluster:

- {ref}/circuit-breaker.html#script-compilation-circuit-breaker[script.max_compilations_rate]:
Increase the default value of `75/5m` to at least `100/5m`.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Might be best to avoid mentioning the default here because defaults change over time, and this info is likely to get stale.

Copy link
Copy Markdown
Contributor

@dedemorton dedemorton Nov 26, 2019

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just to clarify... I mean that the ES docs should be the source of truth for ES defaults. We probably shouldn't mention them in the Beats docs if we can avoid it.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

makes complete sense, thanks

Increase the default value of `75/5m` to at least `100/5m`.

- {ref}/modules-scripting-using.html#modules-scripting-using-caching[script.cache_max_size]:
Increase the default value of `100` to at least `200` if using both filesets
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

same comment about defaults

@adriansr adriansr merged commit 629b2eb into elastic:master Nov 27, 2019
adriansr added a commit to adriansr/beats that referenced this pull request Jan 16, 2020
The cisco/asa and cisco/ftd filesets can cause problems with the default script compilation settings in Elasticsearch. This PR adds a warning about it to the docs and some workarounds.

(cherry picked from commit 629b2eb)
adriansr added a commit that referenced this pull request Jan 17, 2020
The cisco/asa and cisco/ftd filesets can cause problems with the default script compilation settings in Elasticsearch. This PR adds a warning about it to the docs and some workarounds.

(cherry picked from commit 629b2eb)
adriansr added a commit to adriansr/beats that referenced this pull request Jan 17, 2020
The cisco/asa and cisco/ftd filesets can cause problems with the default script compilation settings in Elasticsearch. This PR adds a warning about it to the docs and some workarounds.

(cherry picked from commit 629b2eb)
adriansr added a commit that referenced this pull request Jan 17, 2020
The cisco/asa and cisco/ftd filesets can cause problems with the default script compilation settings in Elasticsearch. This PR adds a warning about it to the docs and some workarounds.

(cherry picked from commit 629b2eb)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants