Re: Apache Kafka Connect

2022-10-01 Thread sunil chaudhari
Date: Friday, 30. September 2022 at 19.56 > To: users@kafka.apache.org > Subject: Apache Kafka Connect > Hi All, > > I have a scenario where I want to send data from elasticsearch to Mongodb > through kafka and while researching I came across Kafka connect. > > Through Kafka

Re: Apache Kafka Connect

2022-10-01 Thread Pasi Hiltunen
: users@kafka.apache.org Subject: Apache Kafka Connect Hi All, I have a scenario where I want to send data from elasticsearch to Mongodb through kafka and while researching I came across Kafka connect. Through Kafka connect is it possible to have the elasticsearch as a source connector that will

Re: Apache Kafka Connect

2022-10-01 Thread sunil chaudhari
Hi Namita, For Moving data from Elasticsearch to Kafka you need Elasticsearch Source connector. I guess this is not supported connector. You may have to rely on some community developed connector where you may not get instant support. https://github.com/DarioBalinzo/kafka-connect-elasticsearch-sou

Apache Kafka Connect

2022-09-30 Thread Namita Jaokar
Hi All, I have a scenario where I want to send data from elasticsearch to Mongodb through kafka and while researching I came across Kafka connect. Through Kafka connect is it possible to have the elasticsearch as a source connector that will send data/messages from elasticsearch to kafka? I came

Re: CVE-2021-38153: Timing Attack Vulnerability for Apache Kafka Connect and Clients

2021-09-21 Thread Ivan Yurchenko
Hi Randall, Could you please share the JIRA ticket or the fixing commit? It might help to evaluate the impact better. Thank you! Ivan On Tue, 21 Sept 2021 at 19:37, Randall Hauch wrote: > Severity: moderate > > Description: > > Some components in Apache Kafka use `Arrays.equals` to validate a

CVE-2021-38153: Timing Attack Vulnerability for Apache Kafka Connect and Clients

2021-09-21 Thread Randall Hauch
Severity: moderate Description: Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful. Users should upgrade to 2.8.1 or higher, or 3.0.0 or higher

CVE-2019-12399: Apache Kafka Connect REST API may expose plaintext secrets in tasks endpoint

2020-01-13 Thread Randall Hauch
CVE-2019-12399: Apache Kafka Connect REST API may expose plaintext secrets in tasks endpoint Severity: Medium Vendor: The Apache Software Foundation Versions Affected: Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, 2.3.0 Description: When Connect workers in Apache Kafka 2.0.0, 2.0.1