Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove Dynamic Script Compilations warning in Cisco module #19840

Merged
merged 5 commits into from
Jul 16, 2020
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 0 additions & 27 deletions filebeat/docs/modules/cisco.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -22,17 +22,6 @@ Cisco ASA devices also support exporting flow records using NetFlow, which is
supported by the {filebeat-ref}/filebeat-module-netflow.html[netflow module] in
{beatname_uc}.

[WARNING]
=======================================
Some filesets in this module make extensive use of ingest pipeline scripts.
This can cause their ingest pipelines to fail loading due to exceeding the
default compilation limits:

`[script] Too many dynamic script compilations within, max: [75/5m]`

Check the <<dynamic-script-compilations>> section for more information.
=======================================

include::../include/what-happens.asciidoc[]

include::../include/gs-link.asciidoc[]
Expand Down Expand Up @@ -345,22 +334,6 @@ will be found under `rsa.raw`. The default is false.

:fileset_ex!:

[float]
[[dynamic-script-compilations]]
=== Dynamic Script Compilations

The `asa` and `ftd` filesets are based on Elasticsearch ingest pipelines and
make extensive use of script processors and painless conditions. This can cause
the pipelines to fail loading the first time the module is used, due to exceeding
the maximum script compilation limits. It is recommended to tune the following
parameters on your Elasticsearch cluster:

- {ref}/circuit-breaker.html#script-compilation-circuit-breaker[script.max_compilations_rate]:
Increase to at least `100/5m`.

- {ref}/modules-scripting-using.html#modules-scripting-using-caching[script.cache.max_size]:
Increase to at least `200` if using both filesets or other script-heavy modules.

[float]
=== Example dashboard

Expand Down
16 changes: 0 additions & 16 deletions filebeat/docs/modules/sophosxg.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -132,22 +132,6 @@ This is a list of FortiOS fields that are mapped to ECS.

:fileset_ex!:

[float]
[[dynamic-script-compilations-sophosxg]]
=== Dynamic Script Compilations

The `sophosxg` filesets are based on Elasticsearch ingest pipelines and
make extensive use of script processors and painless conditions. This can cause
the pipelines to fail loading the first time the module is used, due to exceeding
the maximum script compilation limits. It is recommended to tune the following
parameters on your Elasticsearch cluster:

- {ref}/circuit-breaker.html#script-compilation-circuit-breaker[script.max_compilations_rate]:
Increase to at least `100/5m`.

- {ref}/modules-scripting-using.html#modules-scripting-using-caching[script.cache.max_size]:
Increase to at least `300` if using both filesets or other script-heavy modules.

:modulename!:
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@adriansr should I remove this as well?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yes, thank you!



Expand Down
27 changes: 0 additions & 27 deletions x-pack/filebeat/module/cisco/_meta/docs.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -17,17 +17,6 @@ Cisco ASA devices also support exporting flow records using NetFlow, which is
supported by the {filebeat-ref}/filebeat-module-netflow.html[netflow module] in
{beatname_uc}.

[WARNING]
stu-elastic marked this conversation as resolved.
Show resolved Hide resolved
=======================================
Some filesets in this module make extensive use of ingest pipeline scripts.
This can cause their ingest pipelines to fail loading due to exceeding the
default compilation limits:

`[script] Too many dynamic script compilations within, max: [75/5m]`

Check the <<dynamic-script-compilations>> section for more information.
=======================================

include::../include/what-happens.asciidoc[]

include::../include/gs-link.asciidoc[]
Expand Down Expand Up @@ -340,22 +329,6 @@ will be found under `rsa.raw`. The default is false.

:fileset_ex!:

[float]
[[dynamic-script-compilations]]
=== Dynamic Script Compilations

The `asa` and `ftd` filesets are based on Elasticsearch ingest pipelines and
make extensive use of script processors and painless conditions. This can cause
the pipelines to fail loading the first time the module is used, due to exceeding
the maximum script compilation limits. It is recommended to tune the following
parameters on your Elasticsearch cluster:

- {ref}/circuit-breaker.html#script-compilation-circuit-breaker[script.max_compilations_rate]:
Increase to at least `100/5m`.

- {ref}/modules-scripting-using.html#modules-scripting-using-caching[script.cache.max_size]:
Increase to at least `200` if using both filesets or other script-heavy modules.

[float]
=== Example dashboard

Expand Down
16 changes: 0 additions & 16 deletions x-pack/filebeat/module/sophosxg/_meta/docs.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -127,20 +127,4 @@ This is a list of FortiOS fields that are mapped to ECS.

:fileset_ex!:

[float]
[[dynamic-script-compilations-sophosxg]]
=== Dynamic Script Compilations

The `sophosxg` filesets are based on Elasticsearch ingest pipelines and
make extensive use of script processors and painless conditions. This can cause
the pipelines to fail loading the first time the module is used, due to exceeding
the maximum script compilation limits. It is recommended to tune the following
parameters on your Elasticsearch cluster:

- {ref}/circuit-breaker.html#script-compilation-circuit-breaker[script.max_compilations_rate]:
Increase to at least `100/5m`.

- {ref}/modules-scripting-using.html#modules-scripting-using-caching[script.cache.max_size]:
Increase to at least `300` if using both filesets or other script-heavy modules.

:modulename!: